We used StrongSwan (looked into it recently). Worked well, easy to setup.
It's a myriad of forks (LibreSwan, FreeSwan, OpenSwan) -- but it seemed like StrongSwan had most frequent updates and good backing.
It's a myriad of forks (LibreSwan, FreeSwan, OpenSwan) -- but it seemed like StrongSwan had most frequent updates and good backing.
Here is this part from my ipsec.conf:
# Always up
dpdaction = restart
dpddelay = 5s
inactivity = 10s
keyingtries=%forever
auto=start
[1] https://wiki.strongswan.org/projects/strongswan/wiki/MobIke