Connect to LANCOM IKEv2 VPN on Mac and iOS – Easy Setup Guide

LANCOM is one of the leading VPN gateway vendors in Europe, providing SMBs with a practical, backdoor-free security solution. Nowadays, most modern LANCOM devices, whether VPN Routers or Unified Firewalls, offer support for state of the art IKEv2 VPN tunnels – giving business users secure remote access to their company network from another location.

This guide walks you through how to connect to LANCOM IKEv2 VPN on your Mac, iPhone or iPad and easily share pre-configured connections with other team members in VPN Tracker.

Menu

• Overview: Compatible LANCOM Devices
• Configuring LANCOM IKEv2 VPN
• Using the .ini File Importer in VPN Tracker
• LANCOM IKEv2 VPN Connection: Manual Setup
• Sharing a LANCOM IKEv2 VPN Connection with Your Team

Overview: Compatible LANCOM Devices

VPN Tracker is compatible with the entire range of professional LANCOM networking hardware, including both classic business routers or next-generation unified firewalls:

Device Category	Operating System	Popular Models
Business Routers	LCOS	1700, 1800, 1900, & 2100 Series
Unified Firewalls	LCOS FX	UF-60, UF-160, UF-260, UF-T60, UF-360+
Central Site Gateways	LCOS	ISG-1000, ISG-5000, ISG-8000
Virtual Routers	LCOS	vRouter 1000, vRouter 3000

Note: While older IKEv1-only devices are supported, we recommend hardware running at least LCOS 10.x or LCOS FX 10.x for the best IKEv2 performance and security.

Configuring LANCOM IKEv2 VPN

For the next part of the guide, we'll assume you've already configured an IKEv2 VPN tunnel on your LANCOM device. If you haven't done this yet, we recommend referring to the official documentation for your specific gateway model. This can be found on the LANCOM website.

IKEv2 VPN setup options

Currently, LANCOM offers three setup options for IKEv2 VPN:

1. The 1-Click-VPN Wizard (Routers): This is the standard method for LCOS-based routers using LANconfig. It generates a ready-to-use .ini configuration file that contains all necessary encryption and gateway settings.
2. VPN Connection Export (Unified Firewalls): For the UF Series (LCOS FX), you can export a connection profile directly from the web interface. This usually provides a .zip archive .ini file needed for the import.
3. Manual configuration – Preferred by network administrators with complex routing requirements that aren't covered by the standard wizards.

For most cases, we recommend using the LANCOM VPN wizard. VPN Tracker offers full support for .ini files and includes an intelligent importer that parses your configuration settings, helping you get connected in seconds without manual data entry.

Using the LANCOM .ini File Importer

Once you've completed the steps in the LANCOM 1-Click-VPN wizard (for Routers) or clicked Export in your VPN Connection settings (for Unified Firewalls), you'll receive an .ini configuration file. This file contains all the necessary encryption and gateway information to automate your setup. In order to connect to your LANCOM IKEv2 VPN on your Mac, download VPN Tracker for Mac and drag and drop the .ini file onto the VPN Tracker icon in the dock:

You'll then see the following dialogue:

Choose the team and folder where you would like to save your new connection, then click Import connection.

VPN Tracker will then automatically parse the file and import your LANCOM connection settings.

When the import is complete, you'll see your new connection in the sidebar, ready to test:

Importing .ini files on the web or for iOS

The VPN Tracker importer for LANCOM .ini files also works seamlessly outside of VPN Tracker for Mac. To connect in your browser, click here to open the VPN Tracker connection creator and upload your .ini configuration file:

Or, on your iPhone or iPad, download VPN Tracker for iOS, click the + to create a new connection, and switch to the Import Connection tab:

Then, click Import to securely save your new LANCOM IKEv2 connection in your account.

Manual IKEV2 configuration for LANCOM

If your LANCOM device doesn't have support for .ini file export, you can also configure your connection manually in VPN Tracker, using one of the existing LANCOM device profiles.

How it works:

1. In VPN Tracker, go to File > New Vendor Connection > LANCOM, or click to open the LANCOM Connection Creator in your browser
2. Find your device, for example the 1900 Series, and select IKEv2
   Please note, while IKEv1 connections are also fully supported, we recommend IKEv2 where possible, as this is the more modern and secure protocol option.
   

   Create a new LANCOM IKEv2 VPN connection

3. Next, you'll see the setup view for your LANCOM IKEv2 connection:
   
   

   Manual connection settings for LANCOM IKEv2

   Give your connection a name, and fill in the fields to accurately match the exact settings you have on your LANCOM gateway. Any deviation from the original gateway settings can cause issues when you try to connect in VPN Tracker!

4. Finally, click on Create to save your connection in your VPN Tracker account and connect on Mac, iPhone and iPad

Share a LANCOM IKEv2 VPN Connection with Your Team

Assuming you've already set up a VPN Tracker team, it's now really straightforward to roll out your new LANCOM IKEv2 connection and provide your team members with secure remote access.

Find your connection in the app sidebar, go to Configure and switch to the Access tab.  Here you can choose to grant access to all team members, or set up specific user groups:

When you're happy, just click the Published slider to make the new connection visible to the selected users:

Why VPN Tracker?

VPN Tracker is the best secure remote access solution for Mac, iPhone and iPad and is compatible with the most popular VPN gateways, including LANCOM, Fortinet, Cisco, SonicWall, and many more.