strongswan_swanctl(8)

1SWANCTL(8)                        strongSwan                        SWANCTL(8)
2
3
4

NAME

6       swanctl - strongSwan configuration, control and monitoring command line
7       interface.
8

SYNOPSIS

10       swanctl command [option ...]
11
12       swanctl -h | --help
13

DESCRIPTION

15       swanctl is a cross-platform command line utility to configure,  control
16       and  monitor the strongSwan IKE daemon. It is a replacement for the ag‐
17       ing starter, ipsec and stroke tools.
18
19       swanctl uses a configuration file called swanctl.conf(5) to parse  con‐
20       figurations  and  credentials. Private keys, certificates and other PKI
21       related credentials are read from specific directories.
22
23       To communicate with the IKE daemon, swanctl uses the VICI protocol, the
24       Versatile  IKE Configuration Interface. This stable interface is usable
25       by other tools and is often preferable than scripting swanctl and pars‐
26       ing its output.
27
28

COMMANDS

30       -i, --initiate
31              initiate a connection
32
33       -t, --terminate
34              terminate a connection
35
36       -R, --rekey
37              rekey an SA
38
39       -d, --redirect
40              redirect an IKE_SA
41
42       -p, --install
43              install a trap or shunt policy
44
45       -u, --uninstall
46              uninstall a trap or shunt policy
47
48       -l, --list-sas
49              list currently active IKE_SAs
50
51       -P, --list-pols
52              list currently installed policies
53
54       -b, --load-authorities
55              (re-)load certification authorities information
56
57       -L, --list-conns
58              list loaded configurations
59
60       -B, --list-authorities
61              list loaded certification authorities information
62
63       -x, --list-certs
64              list stored certificates
65
66       -A, --list-pools
67              list loaded pool configurations
68
69       -g, --list-algs
70              list loaded algorithms and their implementation
71
72       -q, --load-all
73              (re-)load credentials, pools, authorities and connections
74
75       -c, --load-conns
76              (re-)load connection configuration
77
78       -s, --load-creds
79              (re-)load credentials
80
81       -a, --load-pools
82              (re-)load pool configuration
83
84       -T, --log
85              trace logging output
86
87       -S, --stats
88              show daemon infos and statistics
89
90       -f, --flush-certs
91              flush cached certificates
92
93       -r, --reload-settings
94              reload strongswan.conf(5) configuration
95
96       -v, --version
97              show daemon version information
98
99       -h, --help
100              show usage information
101

NAME

SYNOPSIS

DESCRIPTION

COMMANDS

SEE ALSO