[strongSwan] establish secure connection without ike

[Diego Woitasen]

On Sat, Oct 1, 2011 at 5:00 PM, nima chavooshi <nima0102 at gmail.com> wrote:
>
> Hi
> Thanks for your reply.
> Apparently IPSec-Tools is another solution for implementation of IPSec in
> linux.
> But I want to use StrongSwan as IPSec solution, because of stability
> and reliability.
> Anyhow Thanks for your guidance
> On Sat, Oct 1, 2011 at 10:33 PM, Diego Woitasen <diego at woitasen.com.ar>
> wrote:
>>
>> On Sat, Oct 1, 2011 at 2:30 PM, nima chavooshi <nima0102 at gmail.com> wrote:
>> > hi
>> > first of all excuse me for dummy question.
>> > When I started to reading about IPSsec, i have understand that ike is
>> > for
>> > generate and exchange of SA and other critical information for creating
>> > tuunel.
>> > Is it possible that I generate those needed information manually and put
>> > on
>> > endpoint tunnel in order to remove completely ike phases?in fact i want
>> > to
>> > remove ike phases and requirement information are hardcoded on
>> > endpoints.
>> >
>> > thanks for any help or guidance.
>> >
>> >
>> > _______________________________________________
>> > Users mailing list
>> > Users at lists.strongswan.org
>> > https://lists.strongswan.org/mailman/listinfo/users
>> >
>>
>> Yes, it's possible. Not a good idea but possible. Have a look to the
>> "ip xfrm" command o use ipsec-tools (and the setkey command).
>>
>> Regards,
>>  Diego
>>
>> --
>> Diego Woitasen
>
>

If you don't want IKE, you don't need Strongswan. ipsec-tools and
ip-xfrm are you used to configure the keys manually.



-- 
Diego Woitasen