NAME

       ipsec-replace - Replace a connection definition with one from /etc/ipsec.conf

SYNOPSIS

       ipsec replace connection [--config /etc/ipsec.conf] [--ctlsocket /run/pluto/pluto.ctl]

DESCRIPTION

       ipsec replace replaces a connection definition from pluto internal database with one from
       /etc/ipsec.conf. Replace is very similar to ipsec add but it first deletes old connection specification
       and old tunnels using same connection name.

       This only replaces the connection description making it possible for remote to connect. To initialize the
       connection you need to use ipsec up.

SEE ALSO

       ipsec.conf(5), ipsec(8), ipsec-add(8), ipsec-algparse(8), ipsec-briefconnectionstatus(8), ipsec-
       briefstatus(8), ipsec-certutil(8), ipsec-checkconfig(8), ipsec-checknflog(8), ipsec-checknss(8), ipsec-
       connectionstatus(8), ipsec-crlutil(8), ipsec-delete(8), ipsec-down(8), ipsec-ecdsasigkey(8), ipsec-
       fetchcrls(8), ipsec-fipsstatus(8), ipsec-globalstatus(8), ipsec-import(8), ipsec-initnss(8), ipsec-
       letsencrypt(8), ipsec-listall(8), ipsec-listcacerts(8), ipsec-listcerts(8), ipsec-listcrls(8), ipsec-
       listen(8), ipsec-listpubkeys(8), ipsec-modutil(8), ipsec-newhostkey(8), ipsec-ondemand(8), ipsec-
       pk12util(8), ipsec-pluto(8), ipsec-purgeocsp(8), ipsec-redirect(8), ipsec-rereadall(8), ipsec-
       rereadcerts(8), ipsec-rereadsecrets(8), ipsec-restart(8), ipsec-route(8), ipsec-rsasigkey(8), ipsec-
       setup(8), ipsec-showhostkey(8), ipsec-showroute(8), ipsec-showstates(8), ipsec-shuntstatus(8), ipsec-
       start(8), ipsec-status(8), ipsec-stop(8), ipsec-trafficstatus(8), ipsec-unroute(8), ipsec-up(8), ipsec-
       vfychain(8), ipsec-whack(8)

BUGS

       none

AUTHOR

       Tuomo Soini

Libreswan 5.2                                      07/30/2025                                   IPSEC-REPLACE(8)