Features table

This table shows the status of the spected features in a IKEv2 implementation. 

Features

openikev2

racoon2

ikev2

strongSwan

Version

0.94

20/07/2007

2.0alpha

4.1.2

Cookies

Yes

Yes

Yes

Yes

DH group negotiation

Yes

Yes

Yes

Yes

Proposal negotiation

Yes

Yes

Yes

Yes

Traffic selector negotiation

Yes

Yes

Yes

Yes

Narrowing

Yes

No

Yes

Yes

Preshared-Key Authentication

Yes

Yes

Yes

Yes

Certificate Authentication

Yes

Yes

Yes

Yes

Child SA Rekeying

Yes

Yes

Yes

Yes

IKE SA Rekeying

Yes

Yes

Yes

Yes

Child SA Deletion

Yes

Yes

Yes

Yes

IKE SA Deletion

Yes

Yes

Yes

Yes

Configuration Payload (Dynamic Addressing)

Yes

?

No

Yes

NAT Traversal

No

Yes

Yes

Yes

EAP Support

Yes

No

Yes

Yes

Tunnel Mode IPSec

Yes

Yes

Yes

Yes

Transport Mode IPSec

Yes

Yes

Yes

Yes

IPSec Interface

XFRM

PFKEYv2

PFKEYv2

XFRM

Perfect Forward Secrecy for CHILD_SAs

Yes

Yes

No

Yes

IPv6 support

Yes

Yes

Yes

Yes

Different configuration per peer

Yes

Yes

Yes

Yes

Repeated Authentication (RFC4478) Yes No No Yes (not RFC4478)
External APIYesNoNoNo