From owner-freebsd-net@freebsd.org  Sun Nov 19 15:27:24 2017
Return-Path: <owner-freebsd-net@freebsd.org>
Delivered-To: freebsd-net@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 647AED94925
 for <freebsd-net@mailman.ysv.freebsd.org>;
 Sun, 19 Nov 2017 15:27:24 +0000 (UTC)
 (envelope-from hm@hellmuth-michaelis.de)
Received: from mail.agsec.de (mail.agsec.de [194.55.156.222])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 255187C638
 for <freebsd-net@freebsd.org>; Sun, 19 Nov 2017 15:27:23 +0000 (UTC)
 (envelope-from hm@hellmuth-michaelis.de)
Received: from hh01.agsec.de (localhost [127.0.0.1])
 by mail.agsec.de (Postfix) with ESMTP id A2C1061F8B
 for <freebsd-net@freebsd.org>; Sun, 19 Nov 2017 16:27:20 +0100 (CET)
X-Virus-Scanned-AGSEC: MailMurkxDeScraCxler at agsec.de
Received: from mail.agsec.de ([194.55.156.222])
 by hh01.agsec.de (hh01.agsec.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id Vt3mKrKrkung for <freebsd-net@freebsd.org>;
 Sun, 19 Nov 2017 16:27:15 +0100 (CET)
Received: from ernie.int.kts.org (port-57103.pppoe.wtnet.de [46.59.223.199])
 (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by mail.agsec.de (Postfix) with ESMTPSA id 9B7F561F81
 for <freebsd-net@freebsd.org>; Sun, 19 Nov 2017 16:27:15 +0100 (CET)
X-Virus-Scanned-KTS: Mail-UnWroks-U-Laksler at KTS.ORG
Received: from frazzle.int.kts.org (frazzle.int.kts.org [172.31.42.11])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by ernie.int.kts.org (Postfix) with ESMTPS id 8BE9F8C9B06
 for <freebsd-net@freebsd.org>; Sun, 19 Nov 2017 16:27:12 +0100 (CET)
From: Hellmuth Michaelis <hm@hellmuth-michaelis.de>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Subject: Re: OpenVPN vs IPSec
Date: Sun, 19 Nov 2017 16:27:12 +0100
References: <20171118165842.GA73810@admin.sibptus.transneft.ru>
 <5A1073E9.5050503@grosbein.net>
 <20171119142015.GB82727@admin.sibptus.transneft.ru>
 <3A168E23-5CB5-4D99-925A-E9688A24E502@hellmuth-michaelis.de>
 <20171119150131.GH82727@admin.sibptus.transneft.ru>
To: freebsd-net@freebsd.org
In-Reply-To: <20171119150131.GH82727@admin.sibptus.transneft.ru>
Message-Id: <633E7984-727C-48D5-8F8D-6424F25B87E8@hellmuth-michaelis.de>
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.25
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 19 Nov 2017 15:27:24 -0000


> Am 19.11.2017 um 16:01 schrieb Victor Sudakov <vas@mpeks.tomsk.su>:
> 
> Hellmuth Michaelis wrote:
>> 
>> 
>>> 
>>> When I had to setup a VPN with a Macintosh user (road warrior), I
>>> found out that an IPSec VPN would be beyond my mental abilities as I
>>> could not wrap my head around the correct racoon and mpd5
>>> authentication setup between FreeBSD and Mac.  That's for all the talk
>>> about being standard-compliant. OpenVPN saved me.
>> 
>> Try this one on the Mac: http://www.lobotomo.com/products/IPSecuritas 
>> it???s free, it works and it???s actively maintained.
> 
> Interesting. Why not the builtin IPSec implementation?

To get things done. ;-)

-hm