--- title: L2TP slug: device-management-guide/android/l2tp createdAt: 2026-10-06T07:48:37.195Z --- This VPN connection type is supported on iOS, and Windows devices. It is not supported on Android devices. This section covers how to configure L2TP VPN. - [Proxy - None (default)](docId\:vP8Q28LuvL8BfBqb6zset) - [Proxy - Manual](docId\:vP8Q28LuvL8BfBqb6zset) - [Proxy - Automatic](docId\:vP8Q28LuvL8BfBqb6zset) ## Proxy - None (default) Use the following guidelines to configure a L2TP VPN without a proxy. Table: Proxy - None settings | Item | Description | | --------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Name | Enter a short phrase that identifies this VPN setting. | | Description | **Provide a description that clarifies the purpose of these settings.** | | Channel | For macOS only. Select one of the following distribution options:
- Device channel - the configuration is effective for all users on a device. This is the typical option.
- User channel - the configuration is effective only for the currently registered user on a device. | | Connection Type | Select L2TP. | | Server | Enter the IP address, hostname, or URL for the VPN server. | | Proxy | None is the default setting. To configure a Manual or Automatic proxy, go to [Proxy - Manual](docId\:vP8Q28LuvL8BfBqb6zset) or [Proxy - Automatic](docId\:vP8Q28LuvL8BfBqb6zset). | | Shared Secret | The shared secret passcode. This is not the user’s password; the shared secret must be specified to initiate a connection. | | Confirm Shared Secret | Re-enter the shared secret to confirm. | | Send all Traffic | Selecting this option protects data from being compromised, particularly on public networks. | | Username | Specify the user name to use. The default value is $USERID$. Use this field to specify an alternate format, such as:
$USERID$, $EMAIL$, $SAM\_ACCOUNT\_NAME$, $USER\_CUSTOM1$, $USER\_CUSTOM2$, $USER\_CUSTOM3$, $USER\_CUSTOM4$, $CUSTOM\_DEVICE\_Attributename$, $CUSTOM\_USER\_Attributename$, $NULL$
You can use combinations such as the following:
- $USERID$:$EMAIL$
- $USERID$\_$EMAIL$
Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant username.
Some enterprises have a strong preference concerning which identifier is exposed. | | User Authentication | Select the authentication method to use**:** Password or RSA SecureID. | | Password | Specify the password to use (required.) The default value is $PASSWORD$. Include at least one of the following variables:
$USERID$, $EMAIL$, $PASSWORD$, $USER\_CUSTOM1$, $USER\_CUSTOM2$, $USER\_CUSTOM3$, $USER\_CUSTOM4$, $CUSTOM\_DEVICE\_Attributename$, $CUSTOM\_USER\_Attributename$, $NULL$
You can use combinations such as $EMAIL$:$PASSWORD$
Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant password. | ## Proxy - Manual Use the following guidelines to configure a L2TP VPN with a manual proxy. Table: Proxy - Manual settings | Item | Description | | ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Name | Enter a short phrase that identifies this VPN setting. | | Description | **Provide a description that clarifies the purpose of these settings.** | | Channel | For macOS only. Select one of the following distribution options:
- Device channel - the configuration is effective for all users on a device. This is the typical option.
- User channel - the configuration is effective only for the currently registered user on a device. | | Connection Type | Select L2TP.
| | Server | Enter the IP address, hostname, or URL for the VPN server. | | Proxy | Select Manual. To configure an automatic proxy, go to [Proxy - Automatic](docId\:vP8Q28LuvL8BfBqb6zset). | | Proxy Server | Enter the name for the proxy server. | | Proxy Server Port | Enter the port number for the proxy server. | | Type | Select Static or Variable for the type of authentication to be used for the proxy server. | | Proxy Server User Name | If the authentication type is Static, enter the username for the proxy server.
If the authentication type is Variable, the default variable selected is $USERID$. | | Proxy Server Password | If the authentication type is Static, enter the password for the proxy server. Confirm the password in the field below.
If the authentication type is Variable, the default variable selected is $PASSWORD$. | | Proxy Domains (iOS only) | This setting applies to iOS and macOS devices only. | | Shared Secret | The shared secret passcode. This is not the user’s password; the shared secret must be specified to initiate a connection. | | Confirm Shared Secret | Re-enter the shared secret to confirm. | | Send all Traffic | Selecting this option protects data from being compromised, particularly on public networks. | | Username | Specify the user name to use. The default value is $USERID$. Use this field to specify an alternate format, such as:
$USERID$, $EMAIL$, $SAM\_ACCOUNT\_NAME$, $USER\_CUSTOM1$, $USER\_CUSTOM2$, $USER\_CUSTOM3$, $USER\_CUSTOM4$, $CUSTOM\_DEVICE\_Attributename$, $CUSTOM\_USER\_Attributename$, $NULL$
You can use combinations such as the following:
- $USERID$:$EMAIL$
- $USERID$\_$EMAIL$
Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant username.
Some enterprises have a strong preference concerning which identifier is exposed. | | User Authentication | Select the authentication method to use**:**Password or RSA SecureID. | | Password | Specify the password to use (required.) The default value is $PASSWORD$. Include at least one of the following variables:
$USERID$, $EMAIL$, $PASSWORD$, $USER\_CUSTOM1$, $USER\_CUSTOM2$, $USER\_CUSTOM3$, $USER\_CUSTOM4$, $CUSTOM\_DEVICE\_Attributename$, $CUSTOM\_USER\_Attributename$, $NULL$
You can use combinations such as $EMAIL$:$PASSWORD$
Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant password. | ## Proxy - Automatic Use the following guidelines to configure a L2TP VPN with an automatic proxy. Table: Proxy - Automatic settings | Item | Description | | ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Name | Enter a short phrase that identifies this VPN setting. | | Description | **Provide a description that clarifies the purpose of these settings.** | | Channel | For macOS only. Select one of the following distribution options:
- Device channel - the configuration is effective for all users on a device. This is the typical option.
- User channel - the configuration is effective only for the currently registered user on a device. | | Connection Type | Select L2TP.
| | Server | Enter the IP address, hostname, or URL for the VPN server. | | Proxy | Select Automatic. To configure a Manual proxy, go to [Proxy - Manual](docId\:vP8Q28LuvL8BfBqb6zset). | | Proxy Server URL | Enter the URL for the proxy server.
Enter the URL of the location of the proxy auto-configuration file. | | Proxy Domains (iOS only) | This setting applies to iOS and macOS devices only. | | Shared Secret | The shared secret passcode. This is not the user’s password; the shared secret must be specified to initiate a connection. | | Confirm Shared Secret | Re-enter the shared secret to confirm. | | Send all Traffic | Selecting this option protects data from being compromised, particularly on public networks. | | Username | Specify the user name to use. The default value is $USERID$. Use this field to specify an alternate format, such as:
$USERID$, $EMAIL$, $SAM\_ACCOUNT\_NAME$, $USER\_CUSTOM1$, $USER\_CUSTOM2$, $USER\_CUSTOM3$, $USER\_CUSTOM4$, $CUSTOM\_DEVICE\_Attributename$, $CUSTOM\_USER\_Attributename$, $NULL$
You can use combinations such as the following:
- $USERID$:$EMAIL$
- $USERID$\_$EMAIL$
Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant username.
Some enterprises have a strong preference concerning which identifier is exposed. | | User Authentication | Select the authentication method to use**:**Password or RSA SecureID. | | Password | Specify the password to use (required.) The default value is $PASSWORD$. Include at least one of the following variables:
$USERID$, $EMAIL$, $PASSWORD$, $USER\_CUSTOM1$, $USER\_CUSTOM2$, $USER\_CUSTOM3$, $USER\_CUSTOM4$, $CUSTOM\_DEVICE\_Attributename$, $CUSTOM\_USER\_Attributename$, $NULL$
You can use combinations such as $EMAIL$:$PASSWORD$
Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant password. |