|
Features |
openikev2 |
racoon2 |
ikev2 |
strongSwan |
|---|---|---|---|---|
|
Version |
0.94 |
20/07/2007 |
2.0alpha |
4.1.2 |
|
Cookies |
Yes |
Yes |
Yes |
Yes |
|
DH group negotiation |
Yes |
Yes |
Yes |
Yes |
|
Proposal negotiation |
Yes |
Yes |
Yes |
Yes |
|
Traffic selector negotiation |
Yes |
Yes |
Yes |
Yes |
| Narrowing |
Yes |
No |
Yes |
Yes |
|
Preshared-Key Authentication |
Yes |
Yes |
Yes |
Yes |
|
Certificate Authentication |
Yes |
Yes |
Yes |
Yes |
|
Child SA Rekeying |
Yes |
Yes |
Yes |
Yes |
|
IKE SA Rekeying |
Yes |
Yes |
Yes |
Yes |
|
Child SA Deletion |
Yes |
Yes |
Yes |
Yes |
|
IKE SA Deletion |
Yes |
Yes |
Yes |
Yes |
|
Configuration Payload (Dynamic Addressing) |
Yes |
? |
No |
Yes |
|
NAT Traversal |
No |
Yes |
Yes |
Yes |
|
EAP Support |
Yes |
No |
Yes |
Yes |
|
Tunnel Mode IPSec |
Yes |
Yes |
Yes |
Yes |
|
Transport Mode IPSec |
Yes |
Yes |
Yes |
Yes |
|
IPSec Interface |
XFRM |
PFKEYv2 |
PFKEYv2 |
XFRM |
|
Perfect Forward Secrecy for CHILD_SAs |
Yes |
Yes |
No |
Yes |
| IPv6 support |
Yes |
Yes |
Yes |
Yes |
| Different configuration per peer |
Yes |
Yes |
Yes |
Yes |
| Repeated Authentication (RFC4478) | Yes | No | No | Yes (not RFC4478) |
| External API | Yes | No | No | No |