OpenBSD Handbook

OpenBSD 7.9 release · amd64 · Generated 2026-09-09

strongswan-5.9.1p0

IPsec-based VPN software (IKEv1/IKEv2) with XAUTH and EAP

Back to search · Project homepage

Description

strongSwan is reasonably portable open source VPN software supporting both IKEv1 and IKEv2. It has wide support for authentication types including IKEv1 XAUTH (username and password) and multiple IKEv2 EAP mechanisms on both server and client side. The OpenBSD port currently provides only the "kernel-libipsec" plugin. This operates in userland via tun(4) devices and strongSwan's own IPsec implementation rather than using kernel IPsec - it is suggested that this is only used for testing or in client situations where the native IPsec software (isakmpd and iked) does not support the required functionality.

Package information

Ports path
net/strongswan
Package architecture
amd64
Maintainer
The OpenBSD ports mailing-list <ports@openbsd.org>
Categories
net, security
Available flavors
None listed
Only for architectures
aarch64, amd64, arm, i386, mips64, mips64el, powerpc, powerpc64, riscv64, alpha, hppa, sparc64

These are ports metadata. Binary availability depends on the release, architecture and mirror. Build and test dependencies are not an installation checklist.

Direct dependencies

Library

Build

OpenBSD README

Installing and updating packages · Package details as JSON