Which VPN Authentification?

Alitai

Hello Together

I looking which Authentication Methods i should use for an IPsec VPN Connection.

Is there a Option for PEAP-TLS or PEAP-MSCHAPV2?
I'm a little bit confused because of this: https://doc.pfsense.org/index.php/Using_EAP_and_PEAP_with_FreeRADIUS
This must be only for WLAN?

For me it looks like EAP-RADIUS is only possible with: EAP-MSCHAPV2 and EAP-TLS

What (else) is possible? Sorry i'm try to find the perspective.

Hope for a plausible Answer.

Many Thanks

Best Regards
Alitai

Alitai

Hello

I'm a step further.

Config done and works (Android and IOS):
https://doc.pfsense.org/index.php/IKEv2_with_EAP-TLS

Is it now possible to use a Freeradius Server with this config or does it only work with Mschapv2?

And the other Question i have: Is PEAP Supported for a VPN Connection in pfsense? It looks it's not.

Many Thanks

Regards
Alitai

stephenw10

Those things are not mutually exclusive. See: https://doc.pfsense.org/index.php/IKEv2_with_EAP-RADIUS

Steve

Alitai

Thanks for your Answer. :)

I don't understand it 100% but i found this:
https://doc.pfsense.org/index.php/Mobile_VPN_Client_Availability

It shows that my Configuration only works without Radius.
Hope this is still up to date…

Anyways, i'm happy that it works.

Thanks
Regards
Alitai

Alitai

Hello

Got it to work. :)

EAP-Radius means that the VPN Server will send the Authentification to the FreeRadius Server (That was not clear for me).

So i can use now EAP-TLS and EAP-MSCHAPV2 with Freeradius at the same Time.

Thanks

Regards
Alitai