Mobile IPSEC. Adding of new PSK keys.
-
Need some ideas on how to add 2000 PSK keys in batches of around 100 without dropping existing mobile IPsec connections :)
Currently it looks like that the pfsense only support adding one PSK of the time, which will become tiresome to do with 2000 keys. I'm considering a feature request to make it possible to add a list of PSK keys but before that I hoped that some had another idea around this issue.
-
Why?
If it's for IKEv2, use EAP-RADIUS and setup a RADIUS server. It will undoubtedly be easier to import users into RADIUS than to have that many PSKs stored on the firewall.