IPSEC on pfsense 2.2, MOBIKE=NO option?

[bfeitell]

I am wondering if it might be possible to add a toggle for the MOBIKE protocol in pfSense 2.2?

Under the current implementation, when IKE-V2 is used, MOBIKE causes traffic to cross UDP port 4500 whether or not NAT traversal is necessary.

The configuration parameter "mobike=no" keeps IPSEC traffic on UDP port 500.  It might be handy to add the toggle on the Phase 1 page in the NAT-T dropdown, and add a brief explanation of the function of the toggle.

See: https://wiki.strongswan.org/projects/strongswan/wiki/FAQ#Disabling-NAT-traversal

Cheers,
bfeitell

[cmb]

There's still an open ticket to address that, it got pushed to 2.2.1.