xml version encoding UTF-8 DOCTYPE plist PUBLIC Apple DTD PLIST EN htt

  • Anonymous
  • Text only
  • 02 May 2020 
  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

    <key>PayloadContent</key>

    <array>

        <dict>

            <key>IKEv2</key>

            <dict>



                <!-- Username and password from ipsec.secrets -->

                <key>AuthName</key>

                <string>obama</string>

                <key>AuthPassword</key>

                <string>SuperPassword123</string>



                <!-- Hostname or IP address of VPN server.

                 Chosing IP address instead of DNS name can avoid issues with client DNS resolvers and speed up connection process. -->

                <key>RemoteAddress</key>

                <string>43.12.22.134</string>



                <!-- leftid in ipsec.conf -->

                <key>RemoteIdentifier</key>

                <string>tunnel.zhovner.com</string>



                <key>AuthenticationMethod</key>

                <string>Certificate</string>

                <key>ChildSecurityAssociationParameters</key>

                <dict>



                <!-- in ipsec.conf this proposal is: ike=aes256-sha256-modp2048 -->

                    <key>DiffieHellmanGroup</key>

                    <integer>14</integer>

                    <key>EncryptionAlgorithm</key>

                    <string>AES-256</string>

                    <key>IntegrityAlgorithm</key>

                    <string>SHA2-256</string>

                    <key>LifeTimeInMinutes</key>

                    <integer>1440</integer>

                </dict>

                <key>DeadPeerDetectionRate</key>



                <!--

                    None (Disable)

                    Low (keepalive sent every 30 minutes)

                    Medium (keepalive sent every 10 minutes)

                    High (keepalive sent every 1 minute)

                -->

                <string>High</string>

                <key>ExtendedAuthEnabled</key>

                <true/>

                <key>IKESecurityAssociationParameters</key>

                <dict>

                    <key>DiffieHellmanGroup</key>

                    <integer>14</integer>

                    <key>EncryptionAlgorithm</key>

                    <string>AES-256</string>

                    <key>IntegrityAlgorithm</key>

                    <string>SHA2-256</string>

                    <key>LifeTimeInMinutes</key>

                    <integer>1440</integer>

                </dict>



                <!--

                Always On OnDemand Rule

                Cen be disabled in connection preferences by "On Demand" checkbox

                http://www.v2ex.com/t/137653

                https://developer.apple.com/library/mac/featuredarticles/iPhoneConfigurationProfileRef/Introduction/Introduction.html

                https://github.com/iphoting/ovpnmcgen.rb

                -->

                <key>OnDemandEnabled</key>

                    <integer>1</integer>

                    <key>OnDemandRules</key>

                    <array>

                        <dict>

                            <key>Action</key>

                            <string>Connect</string>

                        </dict>

                    </array>

            </dict>

            <key>IPv4</key>

            <dict>

                <key>OverridePrimary</key>

                <integer>1</integer>

            </dict>

            <key>PayloadDescription</key>

            <string>Configures VPN settings</string>

            <key>PayloadDisplayName</key>

            <string>VPN</string>

            <key>PayloadIdentifier</key>

            <string>com.apple.vpn.managed.96C1C38F-D4D6-472E-BA90-9117ED8896B5</string>

            <key>PayloadType</key>

            <string>com.apple.vpn.managed</string>

            <key>PayloadUUID</key>

            <string>96C1C38F-D4D6-472E-BA90-9117ED8896B5</string>

            <key>PayloadVersion</key>

            <integer>1</integer>



            <!-- VPN connection name in Network Preferences -->

            <key>UserDefinedName</key>

            <string>London VPN</string>

            <key>VPNType</key>

            <string>IKEv2</string>

        </dict>

    </array>



    <!-- Set the name to whatever you like, it is used in the profile list on the device -->

    <key>PayloadDisplayName</key>

    <string>My Super IKEv2 VPN</string>



    <!-- A reverse-DNS style identifier (com.example.myprofile, for example) that identifies the profile. This string is used to determine whether a new profile should replace an existing one or should be added. -->

    <key>PayloadIdentifier</key>

    <string>com.zhovner.tunnel</string>



    <!-- A globally unique identifier, use uuidgen on Linux/Mac OS X to generate it -->

    <key>PayloadUUID</key>

    <string>F3FAD91C-019C-4A79-87A1-CF334C583339</string>

    <key>PayloadType</key>

    <string>Configuration</string>

    <key>PayloadVersion</key>

    <integer>1</integer>

</dict>

</plist>
← newer dump
older dump →