[strongSwan] eap-peap and eap-mschapv2

[Fred]

Two questions on eap-peap.

1) Is that what I want I need if I wish to support PEAP-MSCHAPv2 
(password-based) authentication? I'd like to secure the mschapv2 
authentication via TLS and am using a VPN Reconnect client on Windows 8 
to connect.

If I use rightauth=eap-peap I cannot connect using VPN Reconnect. 
rightauth=eap-mschapv2 works just fine, but is this secured via SSL?

2) Kinda related to 1. On Debian there doesn't even seem to be an 
eap-peap plugin. Erm, where is it!?