On 24.01.2010 23:38, Konstantinos Agouros wrote: > since I am a while out of the game of doing ipsec with Linux: > What's the way to go? Strongswan/Openswan or ipsec-tools for kame/racoon. > > Emerge -p gave me some ~ for ipsec-tools while openswan goes without. > > Any input welcome. I need this for a road warrior setup.
Assuming you will want to support windows clients as well, openswan and openvpn are the populer choices. There has been some mention of questionable code quality for openswan so you might want to check if openvpn fits your needs first. Personally, I would stay away from kame/racoon. -- Eray