This repository has been archived by the owner. It is now read-only.
[UNMAINTAINED] Setup a (really) strong StrongSwan VPN Server for Ubuntu and Debian
Switch branches/tags
Nothing to show
Clone or download
Type Name Latest commit message Commit time
Failed to load latest commit information. Add init.d script name to Readme (Fix #17) Aug 9, 2016 Add ipsec check to script (Fix #36) Dec 30, 2016

Setup a Strongswan IPSec (& L2TP) Server

NOTE: This is probably securer than using Furthermore it supports both L2TP and regular IPSec connections


This script doesn't need a domain or specific public IP to work.

curl -L -O
chmod +x
sudo ./

The script will lead you through the installation process. If you haven't run this script before it will ask you to enter credentials for the VPN, namely:

  • a username
  • a password
  • a PSK (pre-shared key)

For upgrading Strongswan you can just run the script again. Remember to back up your custom IPSec configuration files beforehand.


This installs the vpn-assist init.d script. Systemd is backwards compatible to these scripts and thus you can use it to start|stop|restart the VPN server, which should also start itself automatically on startup.

You can manage accounts for your VPN via /etc/ipsec.secrets and etc/ppp/chap-secrets. @zackdevine's account managing script automates this process


Download the Strongswan source and run:

make uninstall

Then uninstall xl2tpd and remove /etc/init.d/vpn-assist. That should suffice for a rather clean uninstallation.