diff --git a/pkgs/tools/networking/strongswan/default.nix b/pkgs/tools/networking/strongswan/default.nix
new file mode 100644
index 000000000000..01b96e2ab4a0
--- /dev/null
+++ b/pkgs/tools/networking/strongswan/default.nix
@@ -0,0 +1,19 @@
+{ stdenv, fetchurl, gmp }:
+
+stdenv.mkDerivation rec {
+  name = "strongswan-5.2.0";
+
+  src = fetchurl {
+    url = "http://download.strongswan.org/${name}.tar.bz2";
+    sha256 = "1ki6v9c54ykppqnj3prgh62na97yajnvnm2zr1gjxzv05syk035h";
+  };
+
+  buildInputs = [ gmp ];
+
+  meta = {
+    maintainers = [ stdenv.lib.maintainers.shlevy ];
+    description = "OpenSource IPsec-based VPN Solution";
+    homepage = https://www.strongswan.org;
+    license = stdenv.lib.licenses.gpl2Plus;
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index f1c71b61a288..a7db78b04e13 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -2242,6 +2242,8 @@ let
 
   stunnel = callPackage ../tools/networking/stunnel { };
 
+  strongswan = callPackage ../tools/networking/strongswan { };
+
   su = shadow.su;
 
   surfraw = callPackage ../tools/networking/surfraw { };