Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

As per subject. I have heard of default IPsec support on later versions of Linux kernel (without need to recompile or install special packages) but maybe it's a rumour?

Interested in both VPN connectivity scenarios:
- Server-to-Server (e.g. interconnecting geo-distibuted networks)
- Client-to-Server (Windows, iPhone and Blackberry users connecting to the VPN server to access all/part of corp network)

share|improve this question
up vote 2 down vote accepted

Yes, modern kernels support ipsec natively since 2.5+ which is a long time.

you will need to install userspace tools, but they are available in any modern distro so nothing "special" about them

generic howto is here

I would recomment to start with illustrated guide to ipsec as you will have to know how ipsec works if you want to set it up.

share|improve this answer
Can lartc be used to allow client vpn? such as Android powered phone accessing VPN? – Alex Oct 27 '11 at 4:16
also, according to howto on, it seems the kernel does need to be recompiled with PF_KEY etc. What is the advantage over strongswan, which claims no need to mod/recompile kernel. – Alex Oct 27 '11 at 4:22

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.