Remote Access Mobile VPN Client Compatibility¶
pfSense supports a variety of remote access (“mobile”) VPN configuration styles to accommodate nearly any potential client. The table below shows which operating systems have compatible clients with some of the most common remote access VPN configurations available on pfSense.
| Operating System | Protocol | ||||||
|---|---|---|---|---|---|---|---|
| OpenVPN | IPsec | ||||||
| PSK | RSA | Xauth PSK | Xauth RSA | IKEv2 EAP MSCHAPv2/RADIUS | IKEv2 EAP TLS | ||
| Windows XP | 3PA 1 2 | 3PA 3 | 3PA 3 | 3PA 3 | 3PA 3 | ? | ? |
| Windows Vista/7/8 | 3PA 1 2 | 3PA 3 | 3PA 3 | 3PA 3 | 3PA 3 | Yes (7+) | Yes (7+) |
| Windows 10 | 3PA 1 2 | ? | ? | ? | ? | Yes | Yes |
| Android <4 | 3PA | Varies | Varies | Bug | Yes | ? | ? |
| Android 4+ | 3PA 4 | Varies | Varies | Bug | Yes | 3PA 5 | 3PA 5 |
| iOS < 9 | 3PA 6 | ? | ? | Yes | Yes | ? | ? |
| iOS 9+ | 3PA 6 | ? | ? | Yes | Yes | Yes | Yes |
| OS X < 10.11 | 3PA 2 | ? | ? | Yes | Yes | ? | ? |
| OS X 10.11+ | 3PA 2 | ? | ? | Yes | Yes | Yes | Yes |
| SNOM/Yealink | Yes | No | No | No | No | No | No |
Table: pfSense 2.2.x+ Mobile/Remote Access VPN Client Availability
- Yes = OS Native Client Available
- 3PA = Third Party Client Required
- Bug = Known problem configuration, follow the link for more details
- Varies = Varies by device model and vendor options
Unless otherwise stated, UNIX clients (*BSD, Linux, etc) can support any style with manual configurations but the availability of GUI configuration tools varies by distribution.