54 Appendix B Configuration Profile Format
VPN Payload
The VPN payload is designated by the com.apple.vpn.managed PayloadType value.
In addition to the settings common to all payload types, the VPN payload defines the
following keys.
There are two possible dictionaries present at the top level, under the keys “PPP” and
“IPSec”. The keys inside these two dictionaries are described below, along with the
VPNType value under which the keys are used.

PPP Dictionary Keys

The following elements are for VPN payloads of type PPP.
Key Value
UserDefinedName String. Description of the VPN connection displayed on the
device.
OverridePrimary Boolean. Specifies whether to send all traffic through the VPN
interface. If true, all network traffic is sent over VPN.
VPNType String. Determines the settings available in the payload for this
type of VPN connection. It can have three possible
values: “L2TP”, “PPTP”, or “IPSec”, representing L2TP, PPTP and
Cisco IPSec respectively.
Key Value
AuthName String. The VPN account user name. Used for L2TP and PPTP.
AuthPassword String, optional. Only visible if TokenCard is false. Used for L2TP
and PPTP.
TokenCard Boolean. Whether to use a token card such as an RSA SecurID
card for connecting. Used for L2TP.
CommRemoteAddress String. IP address or host name of VPN server. Used for L2TP and
PPTP.
AuthEAPPlugins Array. Only present if RSA SecurID is being used, in which case
it has one entry, a string with value “EAP-RSA”. Used for L2TP
and PPTP.
AuthProtocol Array. Only present if RSA SecurID is being used, in which case it
has one entry, a string with value “EAP”. Used for L2TP and PPTP.
CCPMPPE40Enabled Boolean. See discussion under CCPEnabled. Used for PPTP.
CCPMPPE128Enabled Boolean. See discussion under CCPEnabled. Used for PPTP.
CCPEnabled Boolean. Enables encryption on the connection. If this key and
CCPMPPE40Enabled are true, represents automatic encryption
level; if this key and CCPMPPE128Enabled are true, represents
maximum encryption level. If no encryption is used, then none
of the CCP keys are true. Used for PPTP.