@dguido Use IKEv2 w/ Suite B algos (i.e. AES GCM) and key sizes. Disable short key lengths, some clients default to them for compat (iOS).
Lazytweet: Has anyone done a technical comparison between OpenVPN and IPSec/IKEv2? Eg., pros/cons of major protocol and implementation diffs
-
-
-
@dguido TLS (used by OpenVPN) is overkill for use between trusted peers and enables attacks that are less risk elsewhere (i.e. heartbleed). - 6 more replies
New conversation -
-
-
@dguido yes, one is easy to configure the other one drives you to near insanity every single time...you figure out which one ;-PThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@dguido IKEv2 = IPv6 + IPv4 + Peer Authorization Database + EAP-IKEv2 Payloads + new of Internet Key Exchange Version 2 (IKEv2) ParametersThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@dguido rfc4308 + rfc7296 + RFC7427 + RFC7670Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@dguido I wish there were better how-tos online for popular IPSec clients like osx/iOS. Getting one connected to cisco IOS should be easier!Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.