There are advantages to OpenVPN: the main one being that since it's using a "standard" UDP payload, it can snake data into places where IPSec may not be able to easily go. IPSec may have trouble with NAT transitions, or have trouble with firewalls outside of the VPN admin's control that block ESP/AH protocols.
Performance of OpenVPN might become an issue for high workload or high collision/retransmission networks. My use was a light load (1-2 simultaneous workstation users) and on end-to-end wired networks, so I didn't have performance issues. My biggest problem with OpenVPN was dealing with remote user support issues (configuration/operation).
|