Samsung Knox IPsec

Enter a short phrase that identifies this VPN setting.

Provide a description that clarifies the purpose of these settings.

For macOS only. Select one of the following distribution options:

Select Samsung Knox IPsec.

Enter the IP address, hostname, or URL for the VPN server.

Enter the IP address, hostname, or URL for the fallback server to use in the event that the primary server is not available.

Select the authentication method to use:

This field displays when Pre-Shared Key is selected as the Authentication Type.

Enter the shared secret passcode. This is not the user’s password; the shared secret must be specified to initiate a connection.

Re-enter the Shared Secret passcode to confirm.

This field displays when Certificate is selected as the Authentication Type.

Select the Group ID type your IPsec VPN server uses to authenticate to IKE peers.

This field displays when Certificate is selected as the Authentication Type.

Select to enable user authentication as an additional factor.

This field displays when Pre-Shared Key is selected as the Authentication Type. Enter the group name for your Samsung Knox IPsec VPN server. This name corresponds to the value selected in Group ID Type.

This field displays when Certificate is selected as the Authentication Type.

Select the entry you created for supporting VPN, if you are implementing certificate-based authentication.

This field displays when Certificate is selected as the Authentication Type.

Select the entry you created for supporting VPN, if you are implementing certificate-based authentication.

Specify the user name to use. The default value is $USERID$. Use this field to specify an alternate format, such as:

$USERID$, $EMAIL$, $SAM_ACCOUNT_NAME$, $USER_CUSTOM1$, $USER_CUSTOM2$, $USER_CUSTOM3$, $USER_CUSTOM4$, $CUSTOM_DEVICE_Attributename$, $CUSTOM_USER_Attributename$, $NULL$

You can use combinations such as the following:

Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant username.

Some enterprises have a strong preference concerning which identifier is exposed.

Specify the password to use (required.) The default value is $PASSWORD$. Include at least one of the following variables:

$USERID$, $EMAIL$, $PASSWORD$, $USER_CUSTOM1$, $USER_CUSTOM2$, $USER_CUSTOM3$, $USER_CUSTOM4$, $CUSTOM_DEVICE_Attributename$, $CUSTOM_USER_Attributename$, $NULL$

You can use combinations such as $EMAIL$:$PASSWORD$

Enter $NULL$ if you want the field presented to the user to be blank. Users will need to fill in the relevant password.

The IPsec VPN server uses the IKE to negotiate the protocols and algorithms used for the connection, and to generate the encryption and authentication keys. Select one:

If you selected IKE Phase 1, select the mode of operation in use by your IPsec VPN server: