---
title: NetworkVPNIKEV2Authentication_ExtendedAuthObject
framework: Device Management
role: symbol
role_heading: Object
platforms: [iOS 27.0+, iPadOS 27.0+, Mac Catalyst 27.0+, macOS 27.0+, tvOS 27.0+, visionOS 27.0+]
path: devicemanagement/networkvpnikev2authentication_extendedauthobject
---

# NetworkVPNIKEV2Authentication_ExtendedAuthObject

Specifies details about extended authentication (EAP).

## Declaration

```data
object NetworkVPNIKEV2Authentication_ExtendedAuthObject
```

## Properties

CredentialsAssetReference: The identifier of an asset declaration that contains the credentials (user name and password) to authenticate with the VPN server. Required when Enabled is set to true. Implies the use of EAP-MSCHAPv2. Enabled: If true, enables EAP-only authentication. ServerCertificateCommonName: The common name of the server certificate. The system uses this name to validate the certificate sent by the IKE server. If not set, the system uses the remote identifier to validate the certificate. ServerCertificateIssuerCommonName: Common Name of the server certificate issuer. If set, this field causes IKE to send a certificate request based on this certificate issuer to the server. This key is required if the IdentityCertificateType key is included and the ExtendedAuth.Enabled key is true. TLSMaximumVersion: The maximum TLS version to use with EAP-TLS authentication. TLSMinimumVersion: The minimum TLS version to use with EAP-TLS authentication.