Comparison


The features provided by the different IPsec implementations are similar:
FreeS/WAN has less algorithms (only 3DES) and IKE does not handle certificates (work in progress)

Today, most of the work is focused on IKE

Only one supports hardware cryptography

None of them support legacy authentication or client configuration extensions drafts (xauth, hybrid, mode-cfg):
useful for client configuration but no more supported by the IETF