pfSense

I've spent several days getting my VPN working and learned a lot in the process.

I've made a little patch here:
https://github.com/pfsense/pfsense/pull/3524

that adds warnings about poor security choices. I'm no crypto expert, but my source is:
https://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites

I don't think it's sufficient though, there are localization files to fix too I think. And docs like this:
https://doc.pfsense.org/index.php/IKEv2_with_EAP-MSCHAPv2

and the book, wiki, etc. etc.