IKEv2 with EAP-MSCHAPv2 mobile VPN

RouterOS General
1

Hi!
I have two different routers. One of them is just a personal computer running OPNsense as OS. Second one is RB850Gx2 (v6.45.1).
I want to create VPN server using IKEv2 with EAP-MSCHAPv2 on both of them. I have already created it on OPNsense following this tutorial. Now I want to create something similar on RB850Gx2. I used this documentation as base and did these steps -

  1. created CA and then server certificate
  2. created profile and proposal
  3. created pool and mode config
  4. created policy group and policy
  5. created peer
    But when I try to create identity using auth-method as eap and eap-methods as eap-mschapv2, it return “Couldn’t add New IPsec Identity - only eap client supported (6).” What does it means? :smiley: Does Mikrotik even support this VPN type I want to create? Or I do something wrong?
    Thanks!
2

They only released client part in stable channel two days ago. Server side is not supported yet. AFAIK nothing have been promised, but since it’s obvious thing to add next, I’d say it’s just matter of time.