This is the documentation for the 23.11 version. Looking for the documentation of the latest version? Have a look here.


IPsec provides a standards-based VPN implementation compatible with other IPsec implementations. The IPsec subsystem in TNSR is handled by strongSwan.

For site-to-site usage, TNSR supports route-based IPsec, which allows BGP or static routes to send traffic through IPsec.

For remote access IPsec (also known as “Mobile IPsec”), TNSR currently supports IKEv2 with EAP-TLS or PSK.