IPsec mobile client configuration

In the previous section, we configured an IPsec tunnel in which authentication is done though either a PSK or certificates. This is acceptable for connecting two routers, but what if there are multiple mobile clients? In such scenarios, it makes sense to configure settings for each individual user, and we can do that via the Mobile Clients tab.

The IPsec Mobile Clients tab.

The first option on the Mobile Clients tab is the IKE Extensions checkbox. If checked, IPsec mobile client support will be enabled. The next section is Extended Authentication (Xauth). The User Authentication listbox allows you to choose ...

Get Mastering pfSense now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.