" 

 == Not a ""complete IPsec implementations == 

 According to the abstract StrongSwan is a ""complete IPsec implementation"". It is not. It is an IKE daemon. XFRM is still being done by the kernel   "