On: MacOS VPN architecture from System Preferences dow...

[auslander]

You can do all that in Apple Configurator profile. For IKEv2, all crypto parameters, DH, for child SA too, perfect forward secrecy, connect on demand, EAP auth. Works for me, I use same profile for Mac and iOS.

[izacus → auslander]

Umm, did you miss the point of the post you're answering to?

[auslander → izacus]

Yes. He wants a GUI for all possible options. I say no need, VPN providers can just provide mobileconfig file, or you can always make your own.

Or an app. But it works fine without installing 3p app, more secure.

[rmwaite → auslander]

But Configurator .. is a GUI.

[auslander → rmwaite]

But... he didn't like Configurator... "...unless you are using Apple Configurator to create a profile". Ok, I give up :)

[tinus_hn → auslander]

It’s just a text file so you can type it in TextEdit. Is that GUI enough?