OpenVPN vs IPSec

[Victor Sudakov]

Hellmuth Michaelis wrote:
> > 
> > Am 19.11.2017 um 13:08 schrieb Victor Sudakov <vas at mpeks.tomsk.su>:
> > 
> >> It's a standard, too. 
> > 
> > IPsec in itself maybe a standard, but IKE does not seem to be much of
> > a standard, I get the impression that there's much incompatibility
> > between vendors (Cisco, racoon etc). 
> 
> https://tools.ietf.org/html/rfc2409
> https://tools.ietf.org/html/rfc7296

I don't doubt there being RFCs, but there are also some incompatible
vendor extensions. E.g. racoon announces Kerberos authentication
support (which is presently broken) etc.


-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
AS43859