Bug #8470
closed
IKEv2 EAP-MSCHAPv2 inconsistent as option (documentation or fix)
0%
Description
Only if you create a tunnel from the Mobile Clients page instead of from the Tunnels page does the EAP-MSCHAPv2 option appear.
- If you go to create a Tunnel from the Tunnels menu, it won't give you the option
https://router:443/vpn_ipsec_phase1.php
- If you go to create a Tunnel from the Mobile Clients menu
https://router:443/vpn_ipsec_phase1.php?mobile=true
At best, there should be an easy way to switch to this mode.
At the very least there is a lack of documentation on that page that lets you know you're in the wrong place.
This behaviour is inconsistent from the documentation at https://doc.pfsense.org/index.php/IKEv2_with_EAP-MSCHAPv2#Set_up_Mobile_IPsec_for_IKEv2.2BEAP-MSCHAPv2 which suggests that you can "Click the Tunnels Tab | Click the Create Phase1 button at the top if it appears".
Updated by Jim Pingle about 6 years ago
- Status changed from New to Closed
Docs adjusted. It used to work that way (button on either page) in 2.2.x, but in 2.4 the button only shows on the Mobile tab.
It cannot be an option on all P1s because there can only ever be one "mobile" P1, so it has to be handled in a special way.