Having used OpenVPN for a while, I've found it tiresome to install a client on every machine that needs to connect (Android, Windows, Linux.) I'd rather just enter the details in the OS's built in client. My main thought at this point is to use IKEv2 due to its high compatibility and low overhead whilst retaining good security.
I've been trying to find the best guide for setting it up, (because VPN setups in general are quite involved, so a guide is nice) and all I can find are StrongSWAN guides that suggest using practices that I think are insecure (such as mschapv2 authentication.) I'd like to find one that the community considers to not only be good from a security perspective, but highly compatible, and has per-user pre-shared key authentication (no messing with certificates.)
So what this comes down to is: What VPN type is best for my needs, what daemon is best, and what is the most secure way to configure it? Thanks!