2 ms·
We used StrongSwan (looked into it recently). Worked well, easy to setup. It's a myriad of forks (LibreSwan, FreeSwan, OpenSwan) -- but it seemed like StrongSw
by sandstrom 11y ago
We used StrongSwan (looked into it recently). Worked well, easy to setup.
It's a myriad of forks (LibreSwan, FreeSwan, OpenSwan) -- but it seemed like StrongSwan had most frequent updates and good backing.
- zhovner 11y agoLatest strongSwan from brew repository works good on OS X. But most painful thing is connection restart after changing WiFi network. I need to reset it manually in most cases. Even low Dead Peer Detection (dpd) timeouts didn't help. Here is this part from my ipsec.conf: # Always up dpdaction = restart dpddelay = 5s inactivity = 10s keyingtries=%forever auto=start Any suggestions?
- tomputer 11y agoI think MOBIKE [1][2] should solve this, roaming between different networks. [1] https://wiki.strongswan.org/projects/strongswan/wiki/MobIke https://wiki.strongswan.org/projects/strongswan/wiki/MobIke [2] https://tools.ietf.org/html/rfc4555 https://tools.ietf.org/html/rfc4555