PayloadContent IKEv2 AuthenticationMethod Certificate ChildSecurityAssociationParameters DiffieHellmanGroup 19 EncryptionAlgorithm AES-128-GCM IntegrityAlgorithm SHA2-256 LifeTimeInMinutes 1440 DeadPeerDetectionRate Medium DisableMOBIKE 0 DisableRedirect 0 EnableCertificateRevocationCheck 0 EnablePFS IKESecurityAssociationParameters DiffieHellmanGroup 19 EncryptionAlgorithm AES-128-GCM IntegrityAlgorithm SHA2-256 LifeTimeInMinutes 1440 LocalIdentifier {{ item.0 }} PayloadCertificateUUID 1FB2907D-14D3-4BAB-A472-B304F4B7F7D9 CertificateType ECDSA256 ServerCertificateIssuerCommonName {{ IP_subject_alt_name }} RemoteAddress {{ IP_subject_alt_name }} RemoteIdentifier {{ IP_subject_alt_name }} UseConfigurationAttributeInternalIPSubnet 0 IPv4 OverridePrimary 1 PayloadDescription Configures VPN settings PayloadDisplayName VPN PayloadIdentifier com.apple.vpn.managed.D247A30B-6023-4C8E-B3E3-FF1910A65E53 PayloadType com.apple.vpn.managed PayloadUUID D247A30B-6023-4C8E-B3E3-FF1910A65E53 PayloadVersion 1 Proxies HTTPEnable {% if proxy_enabled is defined and proxy_enabled == true %} 1 HTTPPort 8118 HTTPProxy {{ local_service_ip }} {% else %} 0 {% endif %} HTTPSEnable 0 UserDefinedName {% if proxy_enabled is defined and proxy_enabled == true %} {{ IP_subject_alt_name }} IKEv2 with proxy {% else %} {{ IP_subject_alt_name }} IKEv2 {% endif %} VPNType IKEv2 Password {{ easyrsa_p12_export_password }} PayloadCertificateFileName {{ item.0 }}.p12 PayloadContent {{ item.1.stdout }} PayloadDescription Adds a PKCS#12-formatted certificate PayloadDisplayName {{ item.0 }}.p12 PayloadIdentifier com.apple.security.pkcs12.1FB2907D-14D3-4BAB-A472-B304F4B7F7D9 PayloadType com.apple.security.pkcs12 PayloadUUID 1FB2907D-14D3-4BAB-A472-B304F4B7F7D9 PayloadVersion 1 PayloadCertificateFileName ca.crt PayloadContent {{ PayloadContentCA.stdout }} PayloadDescription Adds a CA root certificate PayloadDisplayName {{ IP_subject_alt_name }} PayloadIdentifier com.apple.security.root.32EA3AAA-D19E-43EF-B357-608218745A38 PayloadType com.apple.security.root PayloadUUID 32EA3AAA-D19E-43EF-B357-608218745A38 PayloadVersion 1 PayloadDisplayName {% if proxy_enabled is defined and proxy_enabled == true %} {{ IP_subject_alt_name }} IKEv2 with proxy {% else %} {{ IP_subject_alt_name }} IKEv2 {% endif %} PayloadIdentifier {% if proxy_enabled is defined and proxy_enabled == true %} donut.local.37CA79B1-FC6A-421F-960A-90F91FC983BA {% else %} donut.local.37CA79B1-FC6A-421F-960A-90F91FC983BE {% endif %} PayloadRemovalDisallowed PayloadType Configuration PayloadUUID 743B04A8-5725-45A2-B1BB-836F8C16DB0A PayloadVersion 1