diff --git a/net/strongswan/Makefile b/net/strongswan/Makefile
index 20790d8ea7..7b67939399 100644
--- a/net/strongswan/Makefile
+++ b/net/strongswan/Makefile
@@ -325,7 +325,7 @@ endef
 define Package/strongswan-isakmp/description
 $(call Package/strongswan/description/Default)
  This meta-package contains only dependencies to establish  ISAKMP /
- IKE PSK connections, dropping other capabilities in favor of small size 
+ IKE PSK connections, dropping other capabilities in favor of small size
  Can fit most routers even with 4Mb flash (after removing IPv6 support).
 endef
 
@@ -585,6 +585,8 @@ define Package/strongswan-swanctl/install
 	$(INSTALL_DIR) $(1)/usr/sbin
 	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/swanctl $(1)/usr/sbin/
 	$(INSTALL_BIN) ./files/swanctl.init $(1)/etc/init.d/swanctl
+	$(INSTALL_DIR) $(1)/etc/config
+	$(INSTALL_CONF) ./files/ipsec.config $(1)/etc/config/ipsec
 endef
 
 define Package/strongswan-gencerts/install
diff --git a/net/strongswan/files/ipsec.config b/net/strongswan/files/ipsec.config
new file mode 100644
index 0000000000..4e976063f8
--- /dev/null
+++ b/net/strongswan/files/ipsec.config
@@ -0,0 +1,2 @@
+# For strongSwan ipsec config documentation see
+# https://openwrt.org/docs/guide-user/services/vpn/strongswan/start