[Openswan Users] Simple Help

[Paul Wouters]

On Wed, 7 Nov 2007, Jae Chang wrote:

> Paul... thanks again for the quick reply.
>
> I may research the KLIPS option. are there any useful resources for
> describing the KLIPS vs NETKEY solution? I am using NETKEY, only because
> it is the laziest built-in solution, with a Debian distribution, at least.

KLIPS tends to be easier with firewall rules due to its seperate ipsec0
interface. It's also a bit more robust with MTU issues. And it supports
dynamic setup of tunnels (eg a ping causing a tunnel to come up)

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155