OpenVPN vs IPSec

[Eugene Grosbein]

19.11.2017 21:51, Victor Sudakov wrote:

> And the kernel IPsec implementation has had problems with NAT
> traveral. Does it stil have problems and requre extra patches for NAT
> traveral?

No, it has not after IPSec code overhaul in times of 11.0-STABLE.
NAT traversal works out-of-box these days not requiring extra patches.

It needs "nat_traversal on" in the racoon.conf, though.