Store
 

Which remote identifier should I use for an IKEv2 VPN con... - KH2474

Frequently Asked Questions

Which remote identifier should I use for an IKEv2 VPN connection on Mac?
 
The correct remote identifier depends on how the VPN gateway was configured. Many gateways expect a domain name, IP address, email address, or a specific identifier value. What matters is not what looks plausible on the Mac, but which identifier is configured on the gateway side.

In IKEv2, identifiers help both sides match the correct peer during VPN negotiation. The guide connect to IKEv2 VPN on Mac, iPhone, and iPad explains that identifiers may need to be adjusted depending on the gateway configuration. If the type or value does not match, the connection can fail at the end even if the address, login details, and Pre-Shared Key are correct.

Ask your IT team for the expected identifier type and value. Common options include Domain Name (FQDN), IP Address, Email (User FQDN), or a vendor-specific group identifier. If you are unsure, contact our support team directly in VPN Tracker via Help > Contact Support.