I think a fee could be charged for IP Sec. But it should be a reasonable flat fee, without per-user charges. No one is going to use this as an enterprise solution anyway; residential users, small business owners, and geeks that like to tinker shouldn't be restricted by per-user fees.
I would agree with dtemp's assessment. Home users are definitely not going to want to pay a per-user license user fee, so if you want to go down the per-user license route, make the lowest tier something reasonable for the average family. Whoever knows what reasonable is should chime in, but I'd say 10 would probably be in the ballpark(?)
As ipsec seems actual be supported by a lot of router, even the by German Fritz!Box, the DD-WRT should also support it.
The Setup seems easier as OpenVPN, which doesn't seem to be supported by many routers.
Even in professional environments, ipsec is a standard.
And iOS/iPhone is able to connect with ipsec.
So I think, there are a lot of good reasons to support ipsec.
Posted: Sat Nov 23, 2013 18:11 Post subject: Charging for features?
Although I appreciate the time spent to build the configuration scripts, what about the time spent by the original developers of the ipsec kernel modules and userland tools?
I believe that open is open.
I would rather support a model to charge hardware manufacturers to ship their products with dd-wrt and offer to support their specific hardware, after all we have seen that if their hardware is supported by dd-wrt then it sells more and you, the developers, deserve to paid, but again, by the manufacturers not the end users.
Any news on this as it only been 3 years since the original poll was listed and the vast majority of respondents would like to see this feature? Give that this is and has been the de-facto protocol for VPNs (especially site-to-site) for many years and is supported by the vast majority of other manufacturers routers, it does seem a little silly that it isn't supported in dd-wrt.
OpenWRT (https://openwrt.org/) supports IPSec, (off topic - as indeed does it supports the Netgear DG834 router - a favourite in the UK, albeit a bit old now), as well as OpenVPN and PPTP.
ipsec would be awesome on ddwrt and even sweeter with a GUI..ide pay a few buks for the feature..like alot of people have said its becoming a standard especially in the profession...ive tried ipsec racoon on tomato works ok after a big headache connecting it to a juniper, havnet tried ipsec racoon on openwrt although i hear it works. TP-LINK TD-W8960N is a good cheap alternative out of the box. Personally i just ended up going the cisco ASA route, but its pretty expensive although the firewalling and managment is great. One of the simplest in terms of configuration is shrew soft app and runs on windows, linux, mobile devices. Im sure a few more years from now some GPL/open source router project will have a fully GUI configurable IPSEC option as its just a matter of time..time time time!!
StrongSwan is implemented in the recent builds. Service->VPN->Ipsec server _________________ Netgear R7000 on Build 55109
Asus AC-AC68U rev. C1 (AP) on Build 55109
Asus AC-68U rev. A1 on Build 54604
Asus AC-68U rev. A1 on Build 53339
If I were going to consider paying for any features being added to dd-wrt builds, it would not be for IPsec.
But I would consider paying for a more complete easy to use logging system. _________________ multi-tier router stack
wrt 3200's for speed & cpu power, NG R6300v2's for WiFi AP's,
wrt 1200v2 for one of my secure subnets.
wrt54GLs for ad'l 3rd tier machines.