IPSEC-REPLACE(8)
π IPSEC-REPLACE β the manual page, but make it a group chat π
okay so bestie, welcome to ipsec-replace from the ipsec gang (that's section 8 of the manual, executable programs, iykyk) β¨ this is the glow-up-your-connection command and I'm gonna walk you through it like we're texting at 2am π
β¨ NAME β¨
ipsec-replace β swap out a connection definition and put one from /etc/ipsec.conf in its place π
literally that's the whole vibe.
πΈ SYNOPSIS πΈ
ipsec replace connection [--config /etc/ipsec.conf]
[--ctlsocket /run/pluto/pluto.ctl]
π¦ DESCRIPTION π¦
okay so here's the tea β ipsec replace takes a connection definition that's chillin' in pluto's internal database and replaces it with one from /etc/ipsec.conf. no cap.
it's very similar to ipsec add, but with main character energy: it first deletes the old connection specification and the old tunnels that are using the same connection name ποΈβ¨ so it's not just adding, it's a full glow-up, out with the old, in with the new.
lowkey important tho: this only replaces the connection description, which is what makes it possible for the remote to connect. if you actually want to initialize the connection, you gotta use ipsec up. replace is not gonna do that for you bestie π that's a different command's job.
π SEE ALSO π
the whole squad, fr fr π«Ά go read these too:
ipsec.conf(5)ipsec(8)ipsec-add(8)ipsec-algparse(8)ipsec-briefconnectionstatus(8)ipsec-briefstatus(8)ipsec-certutil(8)ipsec-checkconfig(8)ipsec-checknflog(8)ipsec-checknss(8)ipsec-connectionstatus(8)ipsec-crlutil(8)ipsec-delete(8)ipsec-down(8)ipsec-ecdsasigkey(8)ipsec-fetchcrls(8)ipsec-fipsstatus(8)ipsec-globalstatus(8)ipsec-import(8)ipsec-initnss(8)ipsec-letsencrypt(8)ipsec-listall(8)ipsec-listcacerts(8)ipsec-listcerts(8)ipsec-listcrls(8)ipsec-listen(8)ipsec-listpubkeys(8)ipsec-modutil(8)ipsec-newhostkey(8)ipsec-ondemand(8)ipsec-pk12util(8)ipsec-pluto(8)ipsec-purgeocsp(8)ipsec-redirect(8)ipsec-rereadall(8)ipsec-rereadcerts(8)ipsec-rereadsecrets(8)ipsec-restart(8)ipsec-route(8)ipsec-rsasigkey(8)ipsec-setup(8)ipsec-showhostkey(8)ipsec-showroute(8)ipsec-showstates(8)ipsec-shuntstatus(8)ipsec-start(8)ipsec-status(8)ipsec-stop(8)ipsec-trafficstatus(8)ipsec-unroute(8)ipsec-up(8)ipsec-vfychain(8)ipsec-whack(8)
π BUGS π
none π not a single one, she's flawless, she ate and left no crumbs π
π AUTHOR π
the icons who made this happen: Andrew Cagney, Daniel Kahn Gillmor, Tuomo Soini π«Ά stan them.
and that's the whole page bestie!! Libreswan 5.4.1 π and it's dated 10/23/2026, so you know it's fresh β¨ mwah, go replace some connections, love u ππ¦π
π¦ where this page comes from
- fedora 43: libreswan 5.4.1-1.fc43 Β· GPL-2.0-or-later AND MPL-2.0
- fedora 44: libreswan 5.4.1-1.fc44 Β· GPL-2.0-or-later AND MPL-2.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms