>> well it has to cooperate with multitude of clients like windoze, >> point&click routers etc. that's why openvpn. > > Windows has stock support for IPSec with and without L2TP and has no stock openvpn, so IPSec is more preferable. can IPSEC VPN work over nat? even freebsd-freebsd case. I cannot find any tutorial how to do this.