[Swan] ikev2 and win7

Paul Wouters paul at nohats.ca
Tue May 12 05:35:01 EEST 2015

On Mon, 11 May 2015, Bob Miller wrote:

> Today one of my older openswan machines blew a gasket so I got to upgrading 
> it.  As per a recent mention of ikev2 as a way to use native windows tools 
> without l2tp, I have been poking around for info on how to do this some more.
> I found on the strongswan wiki how to configure windows without eap, but the 
> example conns over there have settings that aren't present or the same in 
> libreswan.  I tried configuring based on how I got xauth working, but I have 
> been playing trial and error with that for a while now and it just isn't 
> exciting any more.
> Does anyone have an example config they could share?

Have a look at


It shows a libreswan-strongswan ikev2 interop. The only difference for
you is that you'd configure X.509 certificates instead of PSK.


More information about the Swan mailing list