19.11.2017 20:33, Miroslav Lachman wrote:

> I have opposite experience. One customer needs IPSec and setting
> and debugging was a pain because we don't have access to the other end.
> On the other hand customers with OpenVPN works in a minute.
> Just send or receive openvpn.conf, set some variables in rc.conf and VPN is 
> up and running.

You was pretty lucky, too. Because OpenVPN may be incompatible with its own 
previous version.

Debugging IPSec connection may be pain because one has not been taught
to understand IKE daemon logs, or does not know how IKE works at all,
but access to the other end's config is not needed generally
to see why it does not pass through.

_______________________________________________
freebsd-net@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Reply via email to