IPSEC-ROUTE(8)

💅 ipsec-route — the "put it on standby bestie" page

okay so you're looking at ipsec-route(8), a member of the Executable programs girlies, and honestly? she's short and she knows it. no cap. let's go 💖

---

✨ NAME ✨

ipsec-route — add and route a connection 🫶

---

🌸 SYNOPSIS 🌸

ipsec route connection [--config /etc/ipsec.conf]
            [--ctlsocket /run/pluto/pluto.ctl]

---

🎀 DESCRIPTION 🎀

okay so here's the tea, bestie 🍓 — ipsec route takes a connection that you already added before and flips it into the routed state. like, glow-up era, but for a connection.

the way that works is: it tells pluto to go add all the necessary IPsec policies and routes on your system, so the connection becomes on demand. and what does on demand mean? it means the connection only establishes itself when it's triggered by outbound traffic. she's not doing too much. she waits for the moment. main character energy, lowkey 😌✨

💡 also just so you know — if what you actually want is to add AND route a connection in one go, you don't have to do the two-step dance. just run ipsec ondemand connection and be done, periodt 💅

---

👑 SEE ALSO 👑

the whole friend group 🫂 (yes, all of them, I'm not skipping anybody, that would be rude):

• ipsec.conf(5), ipsec(8), ipsec-add(8), ipsec-algparse(8), ipsec-briefconnectionstatus(8), ipsec-briefstatus(8), ipsec-certutil(8), ipsec-checkconfig(8), ipsec-checknflog(8), ipsec-checknss(8), ipsec-connectionstatus(8), ipsec-crlutil(8), ipsec-delete(8), ipsec-down(8), ipsec-ecdsasigkey(8), ipsec-fetchcrls(8), ipsec-fipsstatus(8), ipsec-globalstatus(8), ipsec-import(8), ipsec-initnss(8), ipsec-letsencrypt(8), ipsec-listall(8), ipsec-listcacerts(8), ipsec-listcerts(8), ipsec-listcrls(8), ipsec-listen(8), ipsec-listpubkeys(8), ipsec-modutil(8), ipsec-newhostkey(8), ipsec-ondemand(8), ipsec-pk12util(8), ipsec-pluto(8), ipsec-purgeocsp(8), ipsec-redirect(8), ipsec-replace(8), ipsec-rereadall(8), ipsec-rereadcerts(8), ipsec-rereadsecrets(8), ipsec-restart(8), ipsec-showstates(8), ipsec-shuntstatus(8), ipsec-start(8), ipsec-status(8), ipsec-stop(8), ipsec-trafficstatus(8), ipsec-unroute(8), ipsec-up(8), ipsec-vfychain(8), ipsec-whack(8)

like I said. everybody. 🌈

---

💀 BUGS 💀

none

not a single one. she's flawless, your honor, and we love that for her 😭👑

---

🧚 AUTHOR 🧚

Andrew Cagney, Tuomo Soini — absolute icons, shoutout to them fr fr 🫶

---

aaaand that's the whole page, bestie! this gorgeous little thing is from Libreswan 5.4.1, dated 10/23/2026. go route something, you've got this 💖✨🦋