Convert OpenVPN to IPSec

[rustydusty1717]

Hello,

Looking for more information on how to convert OpenVPN tunnels to IPSec and the benefits.

I've been using site-to-site OpenVPN's for a while and it seems like nothing but issues with advanced configurations with mtu sizes, fragment sizes, mssfix, etc.

Is IPSec a better overall solution without too much configuring to get it working efficiently compared to OpenVPN?

[doktornotor]

I would give the whole idea a second/third/fourth/fifth thought… Benefits with current state of IPSec in pfSense (and strongswan in general) are about zero (and you must be doing something seriously wrong to have similar issues with OpenVPN in the first place.) Not to mention the royal PITA with configuration.