ipsec.service

This unit is provided by:

• https://packages.debian.org/unstable/strongswan-starter

• https://packages.fedoraproject.org/pkgs/libreswan/

Options

• [Install]
  • WantedBy=multi-user.target
• [Service]
  • ExecReload=/usr/sbin/ipsec reload
  • ExecStart=/usr/libexec/ipsec/pluto --leak-detective --config /etc/ipsec.conf --nofork
  • ExecStart=/usr/sbin/ipsec start --nofork
  • ExecStartPre=/usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig /usr/libexec/ipsec/_stackmanager start /usr/sbin/ipsec --checknss /usr/sbin/ipsec --checknflog
  • ExecStop=/usr/libexec/ipsec/whack --shutdown
  • ExecStopPost=/bin/bash -c 'if test "$EXIT_STATUS" != "12"; then /sbin/ip xfrm policy flush; /sbin/ip xfrm state flush; fi' /usr/sbin/ipsec --stopnflog
  • NotifyAccess=all
  • Restart=on-abnormal
  • Restart=on-failure
  • RestartPreventExitStatus=12
  • Type=notify
  • WatchdogSec=200
• [Unit]
  • After=network-online.target
  • Description=Internet Key Exchange (IKE) Protocol Daemon for IPsec
  • Description=strongSwan IPsec IKEv1/IKEv2 daemon using ipsec.conf
  • Documentation=man:ipsec(8) man:pluto(8) man:ipsec.conf(5)
  • Wants=network-online.target

Additionnal notes

Nothing here.