BSD Portsnet/strongswan 5.9.1p0 OpenBSD
IPsec-based VPN software (IKEv1/IKEv2) with XAUTH and EAP
- System
- OpenBSD
- Repository
- OpenBSD ports
- Maintainer
- The OpenBSD ports mailing-list <[email protected]>
- Categories
- net, security
Description
strongSwan is reasonably portable open source VPN software supporting both IKEv1 and IKEv2. It has wide support for authentication types including IKEv1 XAUTH (username and password) and multiple IKEv2 EAP mechanisms on both server and client side.
The OpenBSD port currently provides only the "kernel-libipsec" plugin. This operates in userland via tun(4) devices and strongSwan's own IPsec implementation rather than using kernel IPsec - it is suggested that this is only used for testing or in client situations where the native IPsec software (isakmpd and iked) does not support the required functionality.
In the other systems
| System | Port | Version |
|---|---|---|
| OpenBSD | net/strongswan | 5.9.1p0 |
| FreeBSD | security/strongswan | 6.1.0 |
| NetBSD | wip/strongswan | 5.7.1 |
| HardenedBSD | security/strongswan | 6.1.0 |
| GhostBSD | security/strongswan | 6.1.0 |
| OPNsense | security/strongswan | 6.0.7 |
Install
Binary package:
pkg_add strongswanFrom the ports tree:
cd /usr/ports/net/strongswan && make installDependencies
Build dependencies 3
Run dependencies 2
No port depends on this one.