Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Similar to this question, I want to configure an IPsec server on Linux which will accept connections from the iPhone. However, unlike the other question, I want to be able to test with pre-shared keys before making the jump to certificates.

According to this page, this can't work with StrongSwan because it doesn't support aggressive mode (and will never support it, according to the FAQ). So this question is limited in scope to OpenSwan.

I have not been able to find an OpenSwan or StrongSwan configuration that works with pre-shared key authentication on the iPhone client.

Note that I do NOT want to use L2TP.

Can anyone provide an ipsec.conf configuration that is known to be working?

share|improve this question
This question, as written, is probably obsolete now. StrongSwan offers a WeakSwan option now which should allow this configuration. I haven't tested yet. – Mike Nov 9 '12 at 0:48

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.