Quelltext der Seite MS/onboarding/ios/vpnconfig

{{Set_lang}}

{{#vardefine:headerIcon|spicon-mobile-security}}

{{:MS/onboarding/ios/vpnconfig.lang}}


</div>{{DISPLAYTITLE:{{#var:display}} }}{{Select_lang}}{{TOC2}}

'''{{#var:head}}'''


{{cl| {{#var:neu}} | {{#var:neu--Artikel}} }}


{{#var:ver-d}} '''12.2020'''



<div class="h3"> {{#var:Vorbemerkung}} </div>
{{#var:Vorbemerkung--desc}}

=== {{#var:Konfigurationsordner}} ===
{{#var:Konfigurationsordner--desc}}

<li class="list--element__alert list--element__hint">{{#var:Konfigurationsordner--Hinweis}}</li>

==== {{#var:Templates}} ====
{{#var:Templates--desc}}
<div class="Einrücken">

{{h5 | {{#var:Certificate Authority}} | {{#var:Certificate Authority-h5}} }}

<pre>
-----BEGIN CERTIFICATE-----
MIIEKTCCAxGgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBrjELMAkGA1UEBhMCREUx
...
HqrtWy/eXrvxBk5cqsjMsiid7KYZqGxQeli9aQBByMXLD+W+5zV/EOZ3q0eXGUUY
JFnpVtR5miRxSVYMqq8JlrdYMPcjKhcf3WSru/Shj/AA+dCIFEzp2EtIuK3K6Jtu
lEAa+0y24V6nS/L9/g==
-----END CERTIFICATE-----
</pre>

{{h5 | {{#var:Client Zertifikat}} | {{#var:Client Zertifikat-h5}} }}

<pre>
-----BEGIN CERTIFICATE-----
MIIDcTCCAlmgAwIBAgIQYPOoN8oxQJWEuJgFzrQbIDANBgkqhkiG9w0BAQsFADCB
rjELMAkGA1UEBhMCREUxFjAUBgNVBAgMDU5pZWRlcnNhY2hzZW4xEjAQBgNVBAcM
...
laXtTQtA4IdGFStIM0srNe81F611kvaJLu71J9ar4Qvndo2RzhkXt/4zVgsaDzhP
Zq2NuIvXEHzO/tNjJZDVA/dgfOXd
-----END CERTIFICATE-----
</pre>

{{h5| {{#var:Client Zertifikat}} | {{#var:Client Zertifikat-h5}} }}

<pre>
-----BEGIN PRIVATE KEY-----
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCjZZtl4wlvv9Th
...
CtpYImI8O795Bwn2HABjYufe3iDNrc418P5Sdem/dIOV4YvNTPTaS/kgCY7xMQ8N
JNAkJ4lGIfi4AREvV7Y/pg4=
-----END PRIVATE KEY-----
</pre>

{{h5| {{#var:Konfigurationsdatei}} | {{#var:Konfigurationsdatei-h5}} }}

<pre>

remote {your.server.com} 443 tcp
route {ip to route into tunnel} 255.255.255.255 vpn_gateway
dhcp-option DNS 192.168.123.1

dev tun
cipher AES-128-CBC
auth SHA256
tun-mtu 1500
persist-key
</pre>

{{h5| {{#var:Passwortdatei}} | {{#var:Passwortdatei-h5 }} }}

<pre>
username
password
</pre>

</div>

===== {{#var:Konfigurationsordner}} =====
<div class="Einrücken">

===== {{#var:Import--iCloud}} =====
<div class="Einrücken">
{{#var:Import--iCloud--desc}}
<li class="list--element__alert list--element__positiv">{{#var:Import--Hinweis}}</li>

</div>
===== {{#var:Import--Configurator}} =====
<div class="Einrücken">

{{#var:Import--Configurator--desc}}
<li class="list--element__alert list--element__positiv">{{#var:Import--Hinweis}}</li>
</div>

</div>
----

=== {{#var:mobileconfig-Datei}} ===
{{#var:mobileconfig-Datei--desc}}

==== Template ====
<div class="Einrücken">
 <dict>
    <key>PayloadContent</key>
    <array>
      <dict>
        <key>IPv4</key>
        <dict>
          <key>OverridePrimary</key>
          <integer>0</integer>
        </dict>
        <key>PayloadDescription</key>
        <string>Configures VPN settings</string>
        <key>PayloadDisplayName</key>
        <string>VPN</string>
        <key>PayloadIdentifier</key>
        <string>com.apple.vpn.managed.5313ec66-a3c0-422c-932d-ef4d4ebb3b18</string>
        <key>PayloadType</key>
        <string>com.apple.vpn.managed</string>
        <key>PayloadUUID</key>
        <string>5313ec66-a3c0-422c-932d-ef4d4ebb3b18</string>
        <key>PayloadVersion</key>
        <integer>1</integer>
        <key>Proxies</key>
        <dict>
          <key>HTTPEnable</key>
          <integer>0</integer>
          <key>HTTPSEnable</key>
          <integer>0</integer>
        </dict>
        <key>UserDefinedName</key>
        <string>{{c|{Insert any identifier}|r}}</string>
        <key>VPN</key>
        <dict>
          <key>AuthenticationMethod</key>
          <string>Certificate</string>
          <key>PayloadCertificateUUID</key>
          <string>5e2de92b-4b5f-4bfd-8074-47bad6c64183</string>
          <key>DisconnectOnIdle</key>
          <integer>0</integer>
          <key>OnDemandEnabled</key>
          <integer>1</integer>
          <key>OnDemandRules</key>
          <array>
            <dict>
              <key>Action</key>
              <string>Connect</string>
            </dict>
          </array>
          <key>RemoteAddress</key>
          <string>DEFAULT</string>
        </dict>
        <key>VPNSubType</key>
        <string>de.securepoint.ms.agent</string>
        <key>VPNType</key>
        <string>VPN</string>
        <key>VendorConfig</key>
        <dict id="vendorConfig">
          <key>auth-user-pass</key>
          <string>{{c|{username}|r}}\n{{c|{password}|r]]</string>
          <key>ca</key>
          <string>-----BEGIN CERTIFICATE-----\n{{c|{MIIEKTCCAxGgAwIBAgIBAD.... The CA certificate which signed the VPN server Certificate ....0y24V6nS/L9/g&#61;&#61;}|r}}\n-----END CERTIFICATE-----\n</string>
          <key>remote.1</key>
          <string>{{c|{VPN server hostname} {VPN server port}|r}}</string> 
          <key>proto.1</key>
          <string>{{c|{VPN server protocol (udp or tcp)}|r}}</string>
          <key>redirect-gateway</key>
          <string>def1</string>
          <key>dev</key>
          <string>tun</string>
          <key>cipher</key>
          <string>AES-128-CBC</string>
          <key>auth</key>
          <string>SHA256</string>
          <key>tun-mtu</key>
          <string>1500</string>
        </dict>
      </dict>
      <dict>
        <key>PayloadCertificateFileName</key>
        <string>Client Certificate</string>
        <key>PayloadContent</key>
        <data&gt;{{c|{MIIPsQIBAzCCD... Client Certificate in PKCS12 format ...pLfEEheyrqcCAwGGoA&#61;&#61;}|r}}</data&gt;
        <key>PayloadDisplayName</key>
        <string>Client Certificate</string>
        <key>PayloadIdentifier</key>
        <string>Client Certificate</string>
        <key>PayloadType</key>
        <string>com.apple.security.pkcs12</string>
        <key>PayloadUUID</key>
        <string>5e2de92b-4b5f-4bfd-8074-47bad6c64183</string>
        <key>PayloadVersion</key>
        <integer>1</integer>
        <key>Password</key>
        <string>{{c|{Password to access the PKCS12 container}|r}}</string>
        <key>PayloadDescription</key>
        <string>Adds a PKCS12-formatted certificate</string>
      </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>{{c|{Identifier in IOS settings for the certificate}|r}}</string>
    <key>PayloadIdentifier</key>
    <string>vpn.configuration</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>a4d7f358-f9a3-42e2-8083-5b26cccab6e2</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
  </dict>
 </plist>
</div>

==== {{#var:mobileconfig-Datei--Import}} ====
<div class="Einrücken">

===== {{#var:Import--iCloud}}=====

<div class="Einrücken">
{{#var:mobileconfig-Datei--Import--icloud--desc}}
</div>

===== {{#var:Import--Configurator}} =====

<div class="Einrücken">
{{#var:mobileconfig-Datei--Import--Configurator--desc}}
</div>

===== {{#var:mobileconfig-Datei--Import--MDM}} =====

<div class="Einrücken">
{{#var:mobileconfig-Datei--Import--MDM--desc}}
</div>
</div>