| IPSEC-REPLACE(8) | Executable programs | IPSEC-REPLACE(8) |
.SH "NAME" ipsec-replace - Replace a connection definition with one
from /etc/ipsec.conf
.SH "SYNOPSIS"
.HP 336u
ipsec replace
connection
[--config /etc/ipsec.conf]
[--ctlsocket /run/pluto/pluto.ctl]
.SH "DESCRIPTION"
.PP ipsec replace replaces a connection definition from pluto
internal database with one from /etc/ipsec.conf. Replace is very similar to
ipsec add but it first deletes old connection specification and old
tunnels using same connection name.
.PP This only replaces the connection description making it possible for
remote to connect. To initialize the connection you need to use ipsec
up.
.SH "SEE ALSO"
.PP ipsec.conf(5), ipsec(8), ipsec-add(8),
ipsec-algparse(8), ipsec-briefconnectionstatus(8),
ipsec-briefstatus(8), ipsec-certutil(8),
ipsec-checkconfig(8), ipsec-checknflog(8),
ipsec-checknss(8), ipsec-connectionstatus(8),
ipsec-crlutil(8), ipsec-delete(8), ipsec-down(8),
ipsec-ecdsasigkey(8), ipsec-fetchcrls(8),
ipsec-fipsstatus(8), ipsec-globalstatus(8),
ipsec-import(8), ipsec-initnss(8),
ipsec-letsencrypt(8), ipsec-listall(8),
ipsec-listcacerts(8), ipsec-listcerts(8),
ipsec-listcrls(8), ipsec-listen(8),
ipsec-listpubkeys(8), ipsec-modutil(8),
ipsec-newhostkey(8), ipsec-ondemand(8),
ipsec-pk12util(8), ipsec-pluto(8), ipsec-purgeocsp(8),
ipsec-redirect(8), ipsec-rereadall(8),
ipsec-rereadcerts(8), ipsec-rereadsecrets(8),
ipsec-restart(8), ipsec-route(8), ipsec-rsasigkey(8),
ipsec-setup(8), ipsec-showhostkey(8),
ipsec-showroute(8), ipsec-showstates(8),
ipsec-shuntstatus(8), ipsec-start(8), ipsec-status(8),
ipsec-stop(8), ipsec-trafficstatus(8),
ipsec-unroute(8), ipsec-up(8), ipsec-vfychain(8),
ipsec-whack(8)
.SH "BUGS"
.PP none
.SH "AUTHOR"
Andrew Cagney, Daniel Kahn Gillmor, Tuomo Soini
| 10/23/2026 | Libreswan v5.4.1-HEAD |