19.11.2017 20:33, Miroslav Lachman wrote: > I have opposite experience. One customer needs IPSec and setting > and debugging was a pain because we don't have access to the other end. > On the other hand customers with OpenVPN works in a minute. > Just send or receive openvpn.conf, set some variables in rc.conf and VPN is > up and running.
You was pretty lucky, too. Because OpenVPN may be incompatible with its own previous version. Debugging IPSec connection may be pain because one has not been taught to understand IKE daemon logs, or does not know how IKE works at all, but access to the other end's config is not needed generally to see why it does not pass through. _______________________________________________ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"