andrey0001/strongswan

IPSec XAUTH ikev1 VPN server (strongswan in docker)

StrongSwan as a Docker container

Latest image based on alpine, please use andrey0001/strongswan:alpine for it.

On alpine image path of config inside container changed.

IPSec XAUTH ikev1 VPN server

Just build it or pull it from andrey0001/strongswan and run it something like this:

docker run -t -d --privileged \
-e VPN_USER=user \
-e VPN_PASS=password \
-e VPN_PSK=secretkey \
-e VPN_SUBNET=192.168.14.0/24 \
--publish 4500:4500/udp \
--publish 500:500/udp \
--hostname strongswan \
--name strongswan andrey0001/strongswan:alpine

• VPN_USER = username (default:user1)
• VPN_PASS = password (default:Sup3rS3cr3t)
• VPN_PSK = preshared key (default:s3cr3tk3y)
• VPN_SUBNET = network (default:192.168.95.0/24)

You could add additional users to the file /etc/ipsec.secrets , then reload secrets by:

ipsec rereadsecrets

inside the container.

strongswan's Issues

Build of new image failed

Hi,
I tried to build a new image and I am having this issue:

Error: Failed to download metadata for repo 'appstream': Cannot prepare internal mirrorlist: No URLs in mirrorlist
The command '/bin/sh -c /usr/bin/yum -y update && /usr/bin/yum -y install epel-release && /usr/bin/yum -y install strongswan strongswan-libipsec iptables' returned a non-zero code: 1