1SWANCTL(8) strongSwan SWANCTL(8)
2
3
4
6 swanctl - strongSwan configuration, control and monitoring command line
7 interface.
8
10 swanctl command [option ...]
11
12 swanctl -h | --help
13
15 swanctl is a cross-platform command line utility to configure, control
16 and monitor the strongSwan IKE daemon. It is a replacement for the ag‐
17 ing starter, ipsec and stroke tools.
18
19 swanctl uses a configuration file called swanctl.conf(5) to parse con‐
20 figurations and credentials. Private keys, certificates and other PKI
21 related credentials are read from specific directories.
22
23 To communicate with the IKE daemon, swanctl uses the VICI protocol, the
24 Versatile IKE Configuration Interface. This stable interface is usable
25 by other tools and is often preferable than scripting swanctl and pars‐
26 ing its output.
27
28
30 -i, --initiate
31 initiate a connection
32
33 -t, --terminate
34 terminate a connection
35
36 -R, --rekey
37 rekey an SA
38
39 -d, --redirect
40 redirect an IKE_SA
41
42 -p, --install
43 install a trap or shunt policy
44
45 -u, --uninstall
46 uninstall a trap or shunt policy
47
48 -l, --list-sas
49 list currently active IKE_SAs
50
51 -P, --list-pols
52 list currently installed policies
53
54 -b, --load-authorities
55 (re-)load certification authorities information
56
57 -L, --list-conns
58 list loaded configurations
59
60 -B, --list-authorities
61 list loaded certification authorities information
62
63 -x, --list-certs
64 list stored certificates
65
66 -A, --list-pools
67 list loaded pool configurations
68
69 -g, --list-algs
70 list loaded algorithms and their implementation
71
72 -q, --load-all
73 (re-)load credentials, pools, authorities and connections
74
75 -c, --load-conns
76 (re-)load connection configuration
77
78 -s, --load-creds
79 (re-)load credentials
80
81 -a, --load-pools
82 (re-)load pool configuration
83
84 -T, --log
85 trace logging output
86
87 -S, --stats
88 show daemon infos and statistics
89
90 -f, --flush-certs
91 flush cached certificates
92
93 -r, --reload-settings
94 reload strongswan.conf(5) configuration
95
96 -v, --version
97 show daemon version information
98
99 -h, --help
100 show usage information
101
103 swanctl.conf(5)
104
105
106
1075.9.6 2015-11-20 SWANCTL(8)