OpenVPN vs IPSec

Eugene Grosbein eugen at grosbein.net
Sun Nov 19 15:19:17 UTC 2017


19.11.2017 21:59, Victor Sudakov wrote:

>> No interaction between mpd5 and racoon is required to make IPSec+L2TP working.
>> In fact, mpd5 starts its part only when IKE/IPSEC part is already completed
>> and runs its unencrypted L2TP protocol over existing IPSec tunnel without knowning it.
> 
> That's great but then you need 1) authentication in IKE/racoon

I use IPSec shared secret.

> and 2) authentication in mpd5? 

Standard CHAP authentication with login/password.

> How do you handle that (and how do you configure the Windows client for it)?

No special configuration of Windows client required. Just "old good" VPN-connection
with L2TP/IPSec type, shared secret and login/password pair.



More information about the freebsd-net mailing list