Features |
openikev2 |
racoon2 |
ikev2 |
strongSwan |
---|---|---|---|---|
Version |
0.94 |
20/07/2007 |
2.0alpha |
4.1.2 |
Cookies |
Yes |
Yes |
Yes |
Yes |
DH group negotiation |
Yes |
Yes |
Yes |
Yes |
Proposal negotiation |
Yes |
Yes |
Yes |
Yes |
Traffic selector negotiation |
Yes |
Yes |
Yes |
Yes |
Narrowing |
Yes |
No |
Yes |
Yes |
Preshared-Key Authentication |
Yes |
Yes |
Yes |
Yes |
Certificate Authentication |
Yes |
Yes |
Yes |
Yes |
Child SA Rekeying |
Yes |
Yes |
Yes |
Yes |
IKE SA Rekeying |
Yes |
Yes |
Yes |
Yes |
Child SA Deletion |
Yes |
Yes |
Yes |
Yes |
IKE SA Deletion |
Yes |
Yes |
Yes |
Yes |
Configuration Payload (Dynamic Addressing) |
Yes |
? |
No |
Yes |
NAT Traversal |
No |
Yes |
Yes |
Yes |
EAP Support |
Yes |
No |
Yes |
Yes |
Tunnel Mode IPSec |
Yes |
Yes |
Yes |
Yes |
Transport Mode IPSec |
Yes |
Yes |
Yes |
Yes |
IPSec Interface |
XFRM |
PFKEYv2 |
PFKEYv2 |
XFRM |
Perfect Forward Secrecy for CHILD_SAs |
Yes |
Yes |
No |
Yes |
IPv6 support |
Yes |
Yes |
Yes |
Yes |
Different configuration per peer |
Yes |
Yes |
Yes |
Yes |
Repeated Authentication (RFC4478) | Yes | No | No | Yes (not RFC4478) |
External API | Yes | No | No | No |