On Fri, 2004-05-21 at 08:52, Jason Tackaberry wrote:
I think the other main contender for VPN software in Fedora Core would be Openswan. OpenVPN is portable, comfortable (being in userspace), flexible, and easy, but Openswan implements IPsec which is (mostly) standardized across vendors, and that's certainly a strong selling point, in spite of its complexity.
Openswan is good to keep around, just in case you need to talk to IPSec devices. But it's a pain in the butt; it's NAT-unfriendly, free and good Windows clients are lacking, interoperability is problematic, etc.
Eh?
OpenSWAN 2.1.2 works fine, interoperates fine with *most* IPSec clients, including WinXP, and supports NAT-T (a.k.a. IPSec over UDP), so there shouldn't be any problems.
I have been running OpenSWAN for a while now and the only problem I've had with it is its somewhat limited handling of aggressive mode (which FreeSWAN didn't implement due to its known security holes.)
-hpa
