[strongSwan] setting up a mac os x client

[Martin Willi]

Hi Cindy,

> I've been reading through this [AppleIKEv2Profile] and particularly
> the Certificate section. Assuming I have a 10.10 and above, is this
> what I need to do to setup a vpn client??

Unfortunately, despite some other information floating around, OS X
10.10 does not support IKEv2 and the associated configuration profiles.
This is supported in iOS 8+ only, and I've updated the Wiki page
accordingly.

For OS X, you'll have to stick to IKEv1 with XAuth if you want to use
the native client [1]. If you want to use certificate authentication
only, you need to configure the connection through (IKEv1) configuration
profiles. Alternatively you may use the xauth-noauth plugin to use a
dummy XAuth round and just rely on certificate authentication.

You can also try the strongSwan IKEv2 OS X App [2], but it currently
supports EAP username/password authentication only.

Regards
Martin

[1]https://wiki.strongswan.org/projects/strongswan/wiki/IOS_(Apple)
[2]http://download.strongswan.org/osx/