'
12.2020
-----BEGIN CERTIFICATE----- MIIEKTCCAxGgAwIBAgIBADANBgkqhkiG9w0BAQsFADCBrjELMAkGA1UEBhMCREUx ... HqrtWy/eXrvxBk5cqsjMsiid7KYZqGxQeli9aQBByMXLD+W+5zV/EOZ3q0eXGUUY JFnpVtR5miRxSVYMqq8JlrdYMPcjKhcf3WSru/Shj/AA+dCIFEzp2EtIuK3K6Jtu lEAa+0y24V6nS/L9/g== -----END CERTIFICATE-----
-----BEGIN CERTIFICATE----- MIIDcTCCAlmgAwIBAgIQYPOoN8oxQJWEuJgFzrQbIDANBgkqhkiG9w0BAQsFADCB rjELMAkGA1UEBhMCREUxFjAUBgNVBAgMDU5pZWRlcnNhY2hzZW4xEjAQBgNVBAcM ... laXtTQtA4IdGFStIM0srNe81F611kvaJLu71J9ar4Qvndo2RzhkXt/4zVgsaDzhP Zq2NuIvXEHzO/tNjJZDVA/dgfOXd -----END CERTIFICATE-----
-----BEGIN PRIVATE KEY----- MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCjZZtl4wlvv9Th ... CtpYImI8O795Bwn2HABjYufe3iDNrc418P5Sdem/dIOV4YvNTPTaS/kgCY7xMQ8N JNAkJ4lGIfi4AREvV7Y/pg4= -----END PRIVATE KEY-----
remote {your.server.com} 443 tcp route {ip to route into tunnel} 255.255.255.255 vpn_gateway dhcp-option DNS 192.168.123.1 dev tun cipher AES-128-CBC auth SHA256 tun-mtu 1500 persist-key
username password
Template
<dict> <key>PayloadContent</key> <array> <dict> <key>IPv4</key> <dict> <key>OverridePrimary</key> <integer>0</integer> </dict> <key>PayloadDescription</key> <string>Configures VPN settings</string> <key>PayloadDisplayName</key> <string>VPN</string> <key>PayloadIdentifier</key> <string>com.apple.vpn.managed.5313ec66-a3c0-422c-932d-ef4d4ebb3b18</string> <key>PayloadType</key> <string>com.apple.vpn.managed</string> <key>PayloadUUID</key> <string>5313ec66-a3c0-422c-932d-ef4d4ebb3b18</string> <key>PayloadVersion</key> <integer>1</integer> <key>Proxies</key> <dict> <key>HTTPEnable</key> <integer>0</integer> <key>HTTPSEnable</key> <integer>0</integer> </dict> <key>UserDefinedName</key> <string>{Insert any identifier}</string> <key>VPN</key> <dict> <key>AuthenticationMethod</key> <string>Certificate</string> <key>PayloadCertificateUUID</key> <string>5e2de92b-4b5f-4bfd-8074-47bad6c64183</string> <key>DisconnectOnIdle</key> <integer>0</integer> <key>OnDemandEnabled</key> <integer>1</integer> <key>OnDemandRules</key> <array> <dict> <key>Action</key> <string>Connect</string> </dict> </array> <key>RemoteAddress</key> <string>DEFAULT</string> </dict> <key>VPNSubType</key> <string>de.securepoint.ms.agent</string> <key>VPNType</key> <string>VPN</string> <key>VendorConfig</key> <dict id="vendorConfig"> <key>auth-user-pass</key> <string>{username}\n{{c|{password}|r]]</string> <key>ca</key> <string>-----BEGIN CERTIFICATE-----\n{MIIEKTCCAxGgAwIBAgIBAD.... The CA certificate which signed the VPN server Certificate ....0y24V6nS/L9/g==}\n-----END CERTIFICATE-----\n</string> <key>remote.1</key> <string>{VPN server hostname} {VPN server port}</string> <key>proto.1</key> <string>{VPN server protocol (udp or tcp)}</string> <key>redirect-gateway</key> <string>def1</string> <key>dev</key> <string>tun</string> <key>cipher</key> <string>AES-128-CBC</string> <key>auth</key> <string>SHA256</string> <key>tun-mtu</key> <string>1500</string> </dict> </dict> <dict> <key>PayloadCertificateFileName</key> <string>Client Certificate</string> <key>PayloadContent</key> <data>{MIIPsQIBAzCCD... Client Certificate in PKCS12 format ...pLfEEheyrqcCAwGGoA==}</data> <key>PayloadDisplayName</key> <string>Client Certificate</string> <key>PayloadIdentifier</key> <string>Client Certificate</string> <key>PayloadType</key> <string>com.apple.security.pkcs12</string> <key>PayloadUUID</key> <string>5e2de92b-4b5f-4bfd-8074-47bad6c64183</string> <key>PayloadVersion</key> <integer>1</integer> <key>Password</key> <string>{Password to access the PKCS12 container}</string> <key>PayloadDescription</key> <string>Adds a PKCS12-formatted certificate</string> </dict> </array> <key>PayloadDisplayName</key> <string>{Identifier in IOS settings for the certificate}</string> <key>PayloadIdentifier</key> <string>vpn.configuration</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadUUID</key> <string>a4d7f358-f9a3-42e2-8083-5b26cccab6e2</string> <key>PayloadVersion</key> <integer>1</integer> </dict> </plist>