---
title: NetworkVPNIKEV2
framework: Device Management
role: symbol
role_heading: Object
platforms: [iOS 27.0+, iPadOS 27.0+, Mac Catalyst 27.0+, macOS 27.0+, tvOS 27.0+, visionOS 27.0+]
path: devicemanagement/networkvpnikev2
---

# NetworkVPNIKEV2

The declaration to configure a VPN using the IKEv2 sub-type.

## Declaration

```data
object NetworkVPNIKEV2
```

## Properties

Authentication: Settings that control authentication. ChildSecurityAssociationParameters: The ChildSecurityAssociationParameters dictionaries. DisableMOBIKE: If true, the system disables MOBIKE. DisableRedirect: If true, the system disables IKEv2 redirect. If not set, the system redirects an IKEv2 connection when it receives a redirect request from the server. DNS: A dictionary to use for all VPN types. EnableCertificateRevocationCheck: If true, the system performs a certificate revocation check for IKEv2 connections. This is a best-effort revocation check and server response timeouts won’t cause it to fail. EnableFallback: If true, the system enables a tunnel over cellular data to carry traffic that’s eligible for Wi-Fi Assist and also requires VPN. Enabling fallback requires that the server support multiple tunnels for a single user. Available: iOS 27+ | iPadOS 27+ | tvOS 27+ | visionOS 27+ EnablePFS: If true,  enables Perfect Forward Secrecy (PFS) for IKEv2 Connections. EnforceStrictAlgorithmSelection: If set to true, the device doesn’t allow DES, 3DES, and Diffie-Hellman groups less than 14. Also the device requires the encryption algorithm specified in IKESecurityAssociationParameters to be at least as cryptographically strong as the algorithm specified in ChildSecurityAssociationParameters. The device rejects this configuration if these requirements aren’t met. HostName: The IP address or hostname of the VPN server. Idle: Specifies details about how the system handles idle VPN connections. IKESecurityAssociationParameters: These parameters apply to Child Security Association unless ChildSecurityAssociationParameters is specified. LocalIdentifier: Identifier of the IKEv2 client. MTU: The Maximum Transmission Unit (MTU) specifies the maximum size in bytes of each packet that the system sends over the IKEv2 VPN interface. NetworkRouting: Specifies details about how the VPN routes different types of network traffic. Available: iOS 27+ | iPadOS 27+ | macOS 27+ | visionOS 27+ OnDemand: Specifies details about how the system controls on-demand VPN. PostQuantumKeyExchange: Post Quantum Key Exchange settings. Proxies: The dictionary to use to configure Proxies for use with VPN. RemoteIdentifier: The remote identifier. UseConfigurationAttributeInternalIPSubnet: If true, negotiations should use IKEv2 Configuration Attribute INTERNAL_IP4_SUBNET and INTERNAL_IP6_SUBNET. VisibleName: The name of the VPN connection that the system displays on the device.

## Discussion

Discussion Specify com.apple.configuration.network.vpn.ikev2 as the declaration type. Configuration availability  |   |   |   |   |   |   |   |  Configuration examples

## Topics

### Objects

- [NetworkVPNIKEV2AuthenticationObject](devicemanagement/networkvpnikev2authenticationobject.md)
- [NetworkVPNIKEV2DNSObject](devicemanagement/networkvpnikev2dnsobject.md)
- [NetworkVPNIKEV2IdleObject](devicemanagement/networkvpnikev2idleobject.md)
- [NetworkVPNIKEV2NetworkRoutingObject](devicemanagement/networkvpnikev2networkroutingobject.md)
- [NetworkVPNIKEV2OnDemandObject](devicemanagement/networkvpnikev2ondemandobject.md)
- [NetworkVPNIKEV2PostQuantumKeyExchangeObject](devicemanagement/networkvpnikev2postquantumkeyexchangeobject.md)
- [NetworkVPNIKEV2ProxiesObject](devicemanagement/networkvpnikev2proxiesobject.md)
- [NetworkVPNIKEV2SecurityAssociationParametersObject](devicemanagement/networkvpnikev2securityassociationparametersobject.md)

## See Also

### Configurations

- [AccessibilitySettings](devicemanagement/accessibilitysettings.md)
- [AccountCalDAV](devicemanagement/accountcaldav.md)
- [AccountCardDAV](devicemanagement/accountcarddav.md)
- [AccountExchange](devicemanagement/accountexchange.md)
- [AccountGoogle](devicemanagement/accountgoogle.md)
- [AccountLDAP](devicemanagement/accountldap.md)
- [AccountMail](devicemanagement/accountmail.md)
- [AccountSettings](devicemanagement/accountsettings.md)
- [AccountSubscribedCalendar](devicemanagement/accountsubscribedcalendar.md)
- [AppManaged](devicemanagement/appmanaged.md)
- [AppSettings](devicemanagement/appsettings.md)
- [AudioAccessorySettings](devicemanagement/audioaccessorysettings.md)
- [ContentCaching](devicemanagement/contentcaching.md)
- [DiskManagementSettings](devicemanagement/diskmanagementsettings.md)
- [ExtensibleSSO](devicemanagement/extensiblesso.md)