Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to replace a Cisco VPN IPSec concentrator with Ubuntu and for instance Strongswan?

1) Do Strongswan implement the same protocolls that Cisco uses?

2) Can we retrieve keys from the Cisco concentrator and import them to the Ubuntu-box, if not can we generate new keys that suits equipment at sites?

3) Are there any performance concerns to think of?

share|improve this question
Of course it's possible. It may or may not be a good idea in your particular case, but I downvoted your question because it is the type of question you shouldn't ask here ( ) – JakePaulus Nov 9 '11 at 18:20
How would I rephrace the question? We have a Cisco concentrator that I have to replace. We have a bunch of users using our services thru this infrastructure today that we will take responsibility for from another company. The Cisco equipment except at clients sites in three continents, belongs to the other company. I want to replace this device without changeing any configurations at the clients sites or as little as possible. We run a small Ubuntu server datacenter and use Ubuntu for most of our services and other routing, firewalling purposes. – Anders Wallenquist Nov 9 '11 at 22:17
The people we have contact with does not know what protocol they are using besides its VPN. – Anders Wallenquist Nov 9 '11 at 22:20
To make a better question, read and understand the documentation. Then, pose specific questions for any issues that you run into or think you might run into. – JakePaulus Nov 9 '11 at 23:15

I'm sure you can find examples of remote-access VPN and site-to-site VPN configuration for Strongswan listed here helpful.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.