IPSec connect through CLI?

[meluvalli]

Is there a command I can send to connect P1 and P2 IPSec connections from CLI?

[jimp]

Yes, what you want is the swanctl command.

For example to initial P1 and P2 for a P2 with an internal id of con1, then you would run:

$ swanctl --initiate --child con1

To see the IDs and so on, look at /var/etc/ipsec/swanctl.conf or they can be dumped from swanctl with commands like swanctl --list-conns

Check the strongSwan docs for swanctl if you want to know more about how that all works.

[meluvalli]

@jimp Thank you! That worked!