Configuring L2TP VPN servers to work with iOS 14 and macOS Big Sur client devices

Network admins should be aware of L2TP VPN server configuration enhancements for use with iOS 14 and macOS Big Sur client devices.

Starting with iOS 14 and macOS Big Sur, IPsec supports HMAC-SHA-256 with L2TP VPN.

To make sure VPN client devices running iOS 14 and macOS Big Sur can connect to your L2TP VPN server, configure the server to truncate the output of the SHA-256 hash to 128 bits. Truncating to fewer than 128 bits will result in L2TP VPN failing to connect.