Changes between Initial Version and Version 1 of DoesOpenvpnSupportIpsecOrPptp


Ignore:
Timestamp:
07/25/14 06:25:47 (10 years ago)
Author:
Samuli Seppänen
Comment:

Migrated content from ​http://openvpn.net/index.php/open-source/339-why-ssl-vpn.html

Legend:

Unmodified
Added
Removed
Modified

  • DoesOpenvpnSupportIpsecOrPptp

    v1 v1  
     1There are three major families of VPN implementations in wide usage today: SSL, IPSec, and PPTP. OpenVPN is an SSL VPN and as such is not compatible with IPSec, L2TP, or PPTP.
     2
     3The IPSec protocol is designed to be implemented as a modification to the IP stack in kernel space, and therefore each operating system requires its own independent implementation of IPSec.
     4
     5By contrast, OpenVPN's user-space implementation allows portability across operating systems and processor architectures, firewall and NAT-friendly operation, dynamic address support, and multiple protocol support including protocol bridging.
     6
     7There are advantages and disadvantages to both approaches. The principal advantages of OpenVPN's approach are portability, ease of configuration, and compatibility with NAT and dynamic addresses. The learning curve for installing and using OpenVPN is on par with that of other security-related daemon software such as ssh.
     8
     9Historically, one of IPSec's advantages has been multi-vendor support, though that is beginning to change as OpenVPN support is beginning to appear on dedicated hardware devices.
     10
     11While the PPTP protocol has the advantage of a pre-installed client base on Windows platforms, analysis by cryptography experts has revealed [http://www.schneier.com/pptp.html security vulnerabilities].