IPSEC-REPLACE(8) Executable programs IPSEC-REPLACE(8)

.SH "NAME" ipsec-replace - Replace a connection definition with one from /etc/ipsec.conf

.SH "SYNOPSIS"

.HP 336u

**ipsec replace**  
*connection*  
\[--config */etc/ipsec.conf*]  
\[--ctlsocket */run/pluto/pluto.ctl*]

.SH "DESCRIPTION"

.PP **ipsec replace** replaces a connection definition from **pluto** internal database with one from /etc/ipsec.conf. Replace is very similar to **ipsec add** but it first deletes old connection specification and old tunnels using same connection name.

.PP This only replaces the connection description making it possible for remote to connect. To initialize the connection you need to use **ipsec up**.

.SH "SEE ALSO"

.PP [**ipsec.conf**(5)](/man/enterprise-packages/libreswan/ipsec.conf.5), [**ipsec**(8)](/man/enterprise-packages/libreswan/ipsec.8), [**ipsec-add**(8)](/man/enterprise-packages/libreswan/ipsec-add.8), [**ipsec-algparse**(8)](/man/enterprise-packages/libreswan/ipsec-algparse.8), [**ipsec-briefconnectionstatus**(8)](/man/enterprise-packages/libreswan/ipsec-briefconnectionstatus.8), [**ipsec-briefstatus**(8)](/man/enterprise-packages/libreswan/ipsec-briefstatus.8), [**ipsec-certutil**(8)](/man/enterprise-packages/libreswan/ipsec-certutil.8), [**ipsec-checkconfig**(8)](/man/enterprise-packages/libreswan/ipsec-checkconfig.8), [**ipsec-checknflog**(8)](/man/enterprise-packages/libreswan/ipsec-checknflog.8), [**ipsec-checknss**(8)](/man/enterprise-packages/libreswan/ipsec-checknss.8), [**ipsec-connectionstatus**(8)](/man/enterprise-packages/libreswan/ipsec-connectionstatus.8), [**ipsec-crlutil**(8)](/man/enterprise-packages/libreswan/ipsec-crlutil.8), [**ipsec-delete**(8)](/man/enterprise-packages/libreswan/ipsec-delete.8), [**ipsec-down**(8)](/man/enterprise-packages/libreswan/ipsec-down.8), [**ipsec-ecdsasigkey**(8)](/man/enterprise-packages/libreswan/ipsec-ecdsasigkey.8), [**ipsec-fetchcrls**(8)](/man/enterprise-packages/libreswan/ipsec-fetchcrls.8), [**ipsec-fipsstatus**(8)](/man/enterprise-packages/libreswan/ipsec-fipsstatus.8), [**ipsec-globalstatus**(8)](/man/enterprise-packages/libreswan/ipsec-globalstatus.8), [**ipsec-import**(8)](/man/enterprise-packages/libreswan/ipsec-import.8), [**ipsec-initnss**(8)](/man/enterprise-packages/libreswan/ipsec-initnss.8), [**ipsec-letsencrypt**(8)](/man/enterprise-packages/libreswan/ipsec-letsencrypt.8), [**ipsec-listall**(8)](/man/enterprise-packages/libreswan/ipsec-listall.8), [**ipsec-listcacerts**(8)](/man/enterprise-packages/libreswan/ipsec-listcacerts.8), [**ipsec-listcerts**(8)](/man/enterprise-packages/libreswan/ipsec-listcerts.8), [**ipsec-listcrls**(8)](/man/enterprise-packages/libreswan/ipsec-listcrls.8), [**ipsec-listen**(8)](/man/enterprise-packages/libreswan/ipsec-listen.8), [**ipsec-listpubkeys**(8)](/man/enterprise-packages/libreswan/ipsec-listpubkeys.8), [**ipsec-modutil**(8)](/man/enterprise-packages/libreswan/ipsec-modutil.8), [**ipsec-newhostkey**(8)](/man/enterprise-packages/libreswan/ipsec-newhostkey.8), [**ipsec-ondemand**(8)](/man/enterprise-packages/libreswan/ipsec-ondemand.8), [**ipsec-pk12util**(8)](/man/enterprise-packages/libreswan/ipsec-pk12util.8), [**ipsec-pluto**(8)](/man/enterprise-packages/libreswan/ipsec-pluto.8), [**ipsec-purgeocsp**(8)](/man/enterprise-packages/libreswan/ipsec-purgeocsp.8), [**ipsec-redirect**(8)](/man/enterprise-packages/libreswan/ipsec-redirect.8), [**ipsec-rereadall**(8)](/man/enterprise-packages/libreswan/ipsec-rereadall.8), [**ipsec-rereadcerts**(8)](/man/enterprise-packages/libreswan/ipsec-rereadcerts.8), [**ipsec-rereadsecrets**(8)](/man/enterprise-packages/libreswan/ipsec-rereadsecrets.8), [**ipsec-restart**(8)](/man/enterprise-packages/libreswan/ipsec-restart.8), [**ipsec-route**(8)](/man/enterprise-packages/libreswan/ipsec-route.8), [**ipsec-rsasigkey**(8)](/man/enterprise-packages/libreswan/ipsec-rsasigkey.8), [**ipsec-setup**(8)](/man/enterprise-packages/libreswan/ipsec-setup.8), [**ipsec-showhostkey**(8)](/man/enterprise-packages/libreswan/ipsec-showhostkey.8), [**ipsec-showroute**(8)](/man/enterprise-packages/libreswan/ipsec-showroute.8), [**ipsec-showstates**(8)](/man/enterprise-packages/libreswan/ipsec-showstates.8), [**ipsec-shuntstatus**(8)](/man/enterprise-packages/libreswan/ipsec-shuntstatus.8), [**ipsec-start**(8)](/man/enterprise-packages/libreswan/ipsec-start.8), [**ipsec-status**(8)](/man/enterprise-packages/libreswan/ipsec-status.8), [**ipsec-stop**(8)](/man/enterprise-packages/libreswan/ipsec-stop.8), [**ipsec-trafficstatus**(8)](/man/enterprise-packages/libreswan/ipsec-trafficstatus.8), [**ipsec-unroute**(8)](/man/enterprise-packages/libreswan/ipsec-unroute.8), [**ipsec-up**(8)](/man/enterprise-packages/libreswan/ipsec-up.8), [**ipsec-vfychain**(8)](/man/enterprise-packages/libreswan/ipsec-vfychain.8), [**ipsec-whack**(8)](/man/enterprise-packages/libreswan/ipsec-whack.8)

.SH "BUGS"

.PP none

.SH "AUTHOR"

Andrew Cagney, Daniel Kahn Gillmor, Tuomo Soini

08/30/2026 Libreswan v5.4-HEAD

---

Document: ipsec-replace(8) from libreswan 5.4-r2 (Chainguard OS)
Source: https://github.com/libreswan/libreswan