OpenVPN vs IPSec

[Eugene Grosbein]

19.11.2017 20:33, Miroslav Lachman wrote:

> I have opposite experience. One customer needs IPSec and setting
> and debugging was a pain because we don't have access to the other end.
> On the other hand customers with OpenVPN works in a minute.
> Just send or receive openvpn.conf, set some variables in rc.conf and VPN is up and running.

You was pretty lucky, too. Because OpenVPN may be incompatible with its own previous version.

Debugging IPSec connection may be pain because one has not been taught
to understand IKE daemon logs, or does not know how IKE works at all,
but access to the other end's config is not needed generally
to see why it does not pass through.