Michael H. Warfield wrote: > For larger VPNs with a lot of systems, certificate based OpenSWAN can > be a lot easier to set up than OpenVPN, particularly if you have to set > up OpenVPN in peer-to-peer mode where each connection requires > configuring unique UDP endpoint ports. OpenVPN server mode can help > with it's address pool technique and their coming out with some newer > tricks for handing out and routing addresses in server mode that hasn't > quite make it to release yet. But that doesn't help out much once you > get away from a star topology. OpenVPN needs to impliment a > server-to-server mode before they can really address that. > Have you looked at openvpn>2? I believe these comments are obsolete.
