Setting Up the iPad and iPhone to Connect to the VPN

Now that you've made sure the VPN is ready for the iPad and iPhone, it's time to set up the devices to connect to the VPN. You can do this either by creating a VPN payload in a configuration profile you install on the device or by manipulating the settings directly on the device.

As with most other settings, creating a VPN payload is usually the best option if you have more than a few iPads and iPhones to set up. If the devices are only a precious few, or if you need to adjust or troubleshoot the VPN settings, work directly on the device.

Creating a VPN Payload for a Configuration Profile

To set up the virtual private network (or networks) the iPad or iPhone can connect to, create a VPN payload in a configuration profile that you install on the device. As with other payloads, you can include the VPN payload as part of a general profile, or you can create a profile that contains only a VPN payload (along with the mandatory General payload that includes the configuration profile's name). Which is the better approach depends on your circumstances and which users will use the VPN.

Starting a VPN Payload and Entering General Settings

To create a VPN payload and enter general settings, follow these steps:

1. Open iPhone Configuration Utility.
2. In the Library category in the Source list, click the Configuration Profiles item to display the list of configuration profiles.
   NOTE If you need to create a new configuration profile to contain the VPN payload, click the New button on the toolbar. In the General pane, type the required name and identifier, and fill in the organization and description if that information will be helpful (as it usually is). In the Security drop-down list or pop-up menu, choose whether the user can remove the profile: Always, With Authorization, or Never.
3. Click the VPN item in the Payloads list to display the Configure VPN box.
4. Click the Configure button to display the VPN pane.
5. In the Connection Name text box, type the name the user will see for the connection-for example, your company name and VPN (or Remote Connection).
6. In the Connection Type pop-up menu, choose the security protocol for the connection: L2TP, PPTP, IPSec (Cisco), Cisco AnyConnect, or Juniper SSL.
7. In the Server text box, type the hostname or IP address of the VPN server that the connection accesses.
8. In the Account text box, type the user account for the VPN connection if you're setting up the configuration profile for a particular user. Otherwise, leave this text box blank so that each user can fill in his or her username after installing the profile.

Next, specify the authentication for the VPN connection. The settings depend on the VPN type you choose in the Connection Type drop-down list or pop-up menu.