OpenVPN vs IPSec

[Victor Sudakov]

Eugene Grosbein wrote:
> 
> > I have a personal success story of establishing transport mode IPSec
> > between Windows and FreeBSD/racoon. But when other OSes are involved,
> > I have the impression that there is no pure IPSec, it's usually
> > IPSec+L2TP, and that's where the FreeBSD part becomes complicated
> > (interaction between ipsec, mpd5 and racoon is required).
> 
> No interaction between mpd5 and racoon is required to make IPSec+L2TP working.
> In fact, mpd5 starts its part only when IKE/IPSEC part is already completed
> and runs its unencrypted L2TP protocol over existing IPSec tunnel without knowning it.

That's great but then you need 1) authentication in IKE/racoon and 2) authentication in mpd5? 
How do you handle that (and how do you configure the Windows client for it)?

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
AS43859