Remote Access Mobile VPN Client Compatibility

pfSense supports a variety of remote access (“mobile”) VPN configuration styles to accommodate nearly any potential client. The table below shows which operating systems have compatible clients with some of the most common remote access VPN configurations available on pfSense.

Operating System Protocol            
  OpenVPN IPsec          
    PSK RSA Xauth PSK Xauth RSA IKEv2 EAP MSCHAPv2/RADIUS IKEv2 EAP TLS
Windows XP 3PA 1 2 3PA 3 3PA 3 3PA 3 3PA 3 ? ?
Windows Vista/7/8 3PA 1 2 3PA 3 3PA 3 3PA 3 3PA 3 Yes (7+) Yes (7+)
Windows 10 3PA 1 2 ? ? ? ? Yes Yes
Android <4 3PA Varies Varies Bug Yes ? ?
Android 4+ 3PA 4 Varies Varies Bug Yes 3PA 5 3PA 5
iOS < 9 3PA 6 ? ? Yes Yes ? ?
iOS 9+ 3PA 6 ? ? Yes Yes Yes Yes
OS X < 10.11 3PA 2 ? ? Yes Yes ? ?
OS X 10.11+ 3PA 2 ? ? Yes Yes Yes Yes
SNOM/Yealink Yes No No No No No No

Table: pfSense 2.2.x+ Mobile/Remote Access VPN Client Availability

  • Yes = OS Native Client Available
  • 3PA = Third Party Client Required
  • Bug = Known problem configuration, follow the link for more details
  • Varies = Varies by device model and vendor options

Unless otherwise stated, UNIX clients (*BSD, Linux, etc) can support any style with manual configurations but the availability of GUI configuration tools varies by distribution.