| Features | openikev2 | racoon2 | ikev2 | strongSwan | 
|---|---|---|---|---|
| Version | 0.94 | 20/07/2007 | 2.0alpha | 4.1.2 | 
| Cookies | Yes | Yes | Yes | Yes | 
| DH group negotiation | Yes | Yes | Yes | Yes | 
| Proposal negotiation | Yes | Yes | Yes | Yes | 
| Traffic selector negotiation | Yes | Yes | Yes | Yes | 
| Narrowing | Yes | No | Yes | Yes | 
| Preshared-Key Authentication | Yes | Yes | Yes | Yes | 
| Certificate Authentication | Yes | Yes | Yes | Yes | 
| Child SA Rekeying | Yes | Yes | Yes | Yes | 
| IKE SA Rekeying | Yes | Yes | Yes | Yes | 
| Child SA Deletion | Yes | Yes | Yes | Yes | 
| IKE SA Deletion | Yes | Yes | Yes | Yes | 
| Configuration Payload (Dynamic Addressing) | Yes | ? | No | Yes | 
| NAT Traversal | No | Yes | Yes | Yes | 
| EAP Support | Yes | No | Yes | Yes | 
| Tunnel Mode IPSec | Yes | Yes | Yes | Yes | 
| Transport Mode IPSec | Yes | Yes | Yes | Yes | 
| IPSec Interface | XFRM | PFKEYv2 | PFKEYv2 | XFRM | 
| Perfect Forward Secrecy for CHILD_SAs | Yes | Yes | No | Yes | 
| IPv6 support | Yes | Yes | Yes | Yes | 
| Different configuration per peer | Yes | Yes | Yes | Yes | 
| Repeated Authentication (RFC4478) | Yes | No | No | Yes (not RFC4478) | 
| External API | Yes | No | No | No |