FreeS/WAN IPsec for Linux, OCLUG tutorial 2003-01-30, RGB
Next Table of Contents

Interoperates fairly well:

  • Many heterogeneous-network users.
  • Fewer problems than expected with features that we deliberately don't support.
  • Rekeying strategy a problem: poorly specified, tricky.

    Performance good:

  • 100MHz Pentium (!) faster than T1.
  • Modern processors approach T3.
  • Need not compromise security for speed (e.g., we use 3DES not DES).
  • Fast LANs more problematic.

    Title Page

    Last modified by Richard Guy Briggs , Thu Jan 30 14:19:00 EST 2003 .