Can i use an Mail (FQUN) Identifier with password?

[kts-tec]

Hello,

we want to create a IPSec VPN with IKEv2 and we for the identifier a Mail (FQUN) entry.
How can i create such a identifier in PFSense?
We use at the moment pfsense 2.3.2

Thanks.
Greetings

[jimp]

Set the identifier to User distinguished name and then put the address in the box that shows up.

[kts-tec]

Thanks jiimp.

There is just another problem with this Identifier.
We have one pfsense on our headquarter and a lancom vpn router on the other site.
On the lancom router i configure IKEv2 with Mail identifier and also a PSK for the local site and the remote site (like the my identifier and peer identifier on the pfsense).
But on the pfsense i can not set a password for these identifiers.

Am I right assuming that i have the set these passwords in the Pre Shared Key Tab in the IPSec configuration page?
So i set the identifier in the phase1 to User distinguished and my values. Then i create the same PSK in the "Pre Shared Keys Tab" with the Password i set in the lancom.

[jimp]

You can try that but if it expects an actual IKEv2 EAP password that isn't going to work. pfSense does not have a way to setup IPsec EAP auth for site-to-site tunnels or outgoing IPsec connections.