CU Connection Options
Preferred Option: IPSec
Alternative Option: OpenVPN
IPSec is much preferred to OpenVPN since the former has reduced
packet overhead and is routed normally between CU sites.
In particular, OpenVPN requires a fully connected mesh network
of point to point links as well as a central VPN server, which
would present a single point of failure.
It may be possible that a site cannot (for whatever reason)
connect to the CU using IPSec. In such a case, OpenVPN may
provide a workaround until IPSec can be implemented.