Configure a VPN setting in Apple Business Essentials
You can use the VPN (virtual private network) settings to configure either L2TP over IPsec or Cisco IPsec for managed Apple devices. You must have a VPN service from a network provider or other organization already configured so that devices can connect to it. Consult your network provider or VPN provider to find out what industry-standard VPN protocols they support.
In Apple Business Essentials, sign in with a user that has the role of Administrator.
Select Settings
in the sidebar, then select All Settings.Select the Add button
next to VPN 
.Under Platform, select the operating systems you would like to configure this setting for.
Set any of the following:
Setting
Description
Connection method
Specifies L2TP over IPsec or Cisco IPsec.
Server hostname
Specifies the IP address or fully qualified domain name (FQDN) of the VPN server.
Group name
Specifies the group identifier for the VPN connection.
Shared secret
Specifies the shared secret for the VPN connection.
Hybrid authentication
Allows authentication using the group name, secret, and a server-side certificate.
Used for the Cisco IPsec configuration.
Send all traffic through the VPN connection
Specifies whether to send all traffic through the VPN connection.
Used for the L2TP over IPsec configuration.
Proxy type
Specifies automatic or manual configuration.
Proxy URL
Specifies the URL of a PAC file—for example, https://www.betterbag.com/filename.pac.
Used for automatic configuration.
Proxy hostname
Specifies the IP address or fully qualified domain name (FQDN) of the proxy server.
Used for manual configuration.
Proxy port
Specifies the port number of the proxy server.
Used for manual configuration.
Select Save.