'\" t
.\"     Title: IPSEC-ADDCONN
.\"    Author: [see the "AUTHOR" section]
.\" Generator: DocBook XSL Stylesheets v1.79.2 <http://docbook.sf.net/>
.\"      Date: 08/30/2026
.\"    Manual: Executable programs
.\"    Source: Libreswan v5.4-HEAD
.\"  Language: English
.\"
.TH "IPSEC\-ADDCONN" "8" "08/30/2026" "Libreswan v5.4-HEAD" "Executable programs"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------

  
  .SH "NAME"
ipsec-addconn \- load a given policy into the pluto IKE daemon

  
  .SH "SYNOPSIS"


    .HP \w'\fBipsec\ addconn\fR\ 'u

      \fBipsec addconn\fR
       [\-\-config\ \fI/etc/ipsec.conf\fR]
       [\-\-ctlsocket\ \fI/run/pluto/pluto\&.ctl\fR]
       [\-\-verbose]
       [\-\-debug]
       [\-\-quiet]
       \-\-options...
    


    .HP \w'\fBipsec\ addconn\fR\ 'u

      \fBipsec addconn\fR
       \fIconnection\fR...
    


    .HP \w'\fBipsec\ addconn\fR\ 'u

      \fBipsec addconn\fR
       \-\-configsetup\ [\fI=option\fR]
       [\-\-noexport]
    


    .HP \w'\fBipsec\ addconn\fR\ 'u

      \fBipsec addconn\fR
       \-\-liststack
       [\-\-noexport]
    


    .HP \w'\fBipsec\ addconn\fR\ 'u

      \fBipsec addconn\fR
       \-\-checkconfig
    


    .HP \w'\fBipsec\ addconn\fR\ 'u

      \fBipsec addconn\fR
       \-\-autoall
    


    .HP \w'\fBipsec\ addconn\fR\ 'u

      \fBipsec addconn\fR
       
	 | \-\-listadd
	 | \-\-listall
	 | \-\-listignore
	 | \-\-listroute
	 | \-\-liststart
       
    


    .HP \w'\fBipsec\ addconn\fR\ 'u

      \fBipsec addconn\fR
       \-\-name\ \fIconnection\-name\fR
       [left=\fIaddress\fR]
       [right=\fIaddress\fR]
       \fIoption\fR=\fIvalue\fR...
    


    .HP \w'\fBipsec\ addconn\fR\ 'u

      \fBipsec addconn\fR
       \-\-help
    


  

  .SH "DESCRIPTION"

    
    .PP
\fBipsec addconn\fR
takes a config file (or stdin) containing the format of ipsec\&.conf, or the format of individual "conn" sections, and uses that information to load named or all connections defined in that configuration file into the running libreswan pluto IKE daemon\&. If no configuration file is specified, the default configuration file is used\&. If no pluto socket is specified, the default socket location will be used\&.


    .PP
When
\fB\-\-autoall\fR
is specified, all connections that include the
\fBauto=\fR
configuration option are processed as follows:


    

      .PP
\fBauto=add\fR
.br
\fBauto=keep\fR
.RS 4

	
	
	
	  the
\fIconnection\fR
is loaded

	
      .RE
      .PP
\fBauto=route\fR
.br
\fBauto=ondemand\fR
.RS 4

	
	
	
	  the
\fIconnection\fR
is loaded and routed

	
      .RE
      .PP
\fBauto=up\fR
.br
\fBauto=start\fR
.RS 4

	
	
	
	  the
\fIconnection\fR
is loaded, routed, marked as needing to stay up, and initiated

	
      .RE
    

    .PP
If the
\fIconnection\fR
is already loaded then it is first removed\&.


    .PP
When one or more
\fIconnections\fR
are specified, those connections are loaded\&. Any
\fBauto=\fR
in the configuration is ignored\&.


    .PP
When
\fB\-\-configsetup\fR
is specified, the configuration file is parsed for the
\fIconfig setup\fR
section and printed to the terminal in a form usable as a shell script\&. These are prefaced with
\fIexport\fR
unless
\fB\-\-noexport\fR
is specified\&. When an
\fIoption\fR
is specified, just the value of that option is printed\&.


    .PP
When
\fB\-\-checkconfig\fR
is specified, the configuration file is parsed and all sections are checked for correct syntax\&. If an error is found, information about it is printed to the terminal\&.


    .PP
When
\fB\-\-listroute\fR
or
\fB\-\-liststart\fR
is specified, no connections are added or replaced, only shown\&. This command can be used to verify which connections the
\fBaddcon\fR
command would act upon, without actually performing any action\&.


    .PP
When
\fB\-\-name \fR\fB\fIconnection\fR\fR
is specified,
\fBaddconn\fR
constructs a connection description by parsing the remainder of the command line as
\fBipsec.conf\fR(5)
conn section key\-values\&. The resulting connection is then loaded into
\fBpluto\fR\&.


    .PP
When
\fB\-\-quiet\fR
is specified, log messages from
\fBpluto\fR
are not copied to standard output\&. To avoid connection messages being duplicated in the logs,
\fBpluto\fR, during startup, invokes
\fBaddconn\fR
with this option\&.


  

  .SH "SEE ALSO"

    
    .PP
\fBipsec.conf\fR(5),
\fBipsec\fR(8),
\fBlibreswan\fR(7)

  

  .SH "HISTORY"

    
    .PP
Man page written for the Libreswan project <\m[blue]\fBhttps://libreswan\&.org/\fR\m[]> by Paul Wouters

  

  .SH "AUTHOR"

    
    
    Andrew Cagney, Daniel Kahn Gillmor, Harald Jenny, Jose Quaresma, Michael Richardson, Paul Wouters, Tuomo Soini