If you have this type of VPN server, choose Layer 2 Tunneling Protocol (L2TP) so your Apple devices can use this method for connecting to the VPN service.
The display name of the VPN connection.
The IP address or fully qualified domain name (FQDN) of the VPN server.
The user account for authenticating the VPN connection.
L2TP User Authentication
The method of user authentication. Available types for L2TP are:
The shared secret for the VPN connection.
Send all traffic through the VPN connection
Whether to send all traffic through the VPN connection
VPN on Demand
Whether to enable VPN on Demand.
The action applies to all matching addresses. Addresses are compared using simple string matching, starting from the end and working backward. The address “.example.com” matches “support.example.com” and “sales.example.com,” but doesn’t match “www.private-example.com.” However, if you specify the match domain as “example.com”—notice there isn’t a period at the beginning—it matches “www.private-example.com” and all the others.
Match domain or hostname
Domain and hostnames that can establish a VPN connection. When domains or hostnames are added, VPN on Demand can be configured for each entry. These options are: