How to roll out strongSwan IKEv2 VPN on macOS

strongSwan is an open source software tool that helps users set up and manage VPNs using the IKEv2 protocol.

If you've configured an IKEv2 VPN server using strongSwan, you can use VPN Tracker to connect on your Mac, iPhone and iPad and roll out connections to the rest of your team. Here's how to get started...

Connect to strongSwan IKEv2 VPN Server

Before you start

This guide assumes you have already successfully configured an IKEv2 VPN server using strongSwan. If you need help getting set up, please refer to strongSwan's documentation which contains multiple examples of supported IKEv2 configuration options.

strongSwan VPN client for Mac

In order to connect to strongSwan VPN on Mac, iPhone or iPad, you will need a VPN client. VPN Tracker is the leading VPN client for Mac and iOS and fully supports IKEv2 based VPN connections – including connections to strongSwan VPN servers.

To get connected to your strongSwan IKEv2 VPN server, open the VPN Tracker connection creator for strongSwan:

Create a new strongSwan connection in VPN Tracker

strongSwan IKEv2 VPN configuration

Next, use the configuration profile in VPN Tracker to enter your strongSwan IKEv2 server settings:

Manually enter your strongSwan IKEv2 connection settings into VPN Tracker

Here you can select your chosen authentication method and add DNS settings.

Advanced settings

Switch to the Advanced tab to select your preferred encryption and authentication algorithms (these must exactly match the settings you applied in strongSwan):

Select encryption and authentication algorithms for IKEv2

Traffic Control: Split tunneling for IKEv2 (optional)

VPN Tracker Traffic Control lets you customize your connections and determine exactly how much of your internet traffic is to be routed over the VPN. Exclude addresses from the VPN or set up connection-based rules.

Use Traffic Control to set up split tunneling for IKEv2 connections

For Teams: Roll out strongSwan IKEv2 VPN connection

VPN Tracker for teams

Now you've set up your strongSwan IKEv2 VPN connection in VPN Tracker, use TeamCloud to invite team members and share the company VPN using end-to-end encryption.

Team setup guide →

This is a fast and easy way to provide everyone on the team with secure remote access, without them having to configure anything themselves.

Share connections via TeamCloud

To share your strongSwan connection, open VPN Tracker app or log in to your my.vpntracker account on the web, select your connection and choose Share with team:

Share strongSwan IKEv2 VPN with your team

Now all your team will have secure access to your strongSwan IKEv2 VPN server in VPN Tracker.