What VPN is IKEv2 on iPhone?

I have installed and have been using the iPhone application Puffin to connect to my VPN service.

The configuration looks like this: But I am not sure what IP the VPN has on my phone. How do I confirm if it is NAT IP address? Note that I understand that the IP addresses of apps (eg. Safari, Puffin) are distinct to the application. However if you are behind a NAT router, you should only get NAT. In your case, the VPN service provides different NAT IP addresses. Puffin, for example, is NAT 1. You should thus be using NAT ip on your phone.

NAT doesn't add any additional IP addresses but reroutes your packets that the network thinks you're going to talk to another server, to another computer it has already set up a temporary IP address for you (usually). Thanks for the reply. So why does the iOS app say a NAT IP address? Is it wrong or is it a feature in Apple iOS so that the user gets the correct NAT IP without them knowing about it? You are correct. Apple did this in case a user has no idea about routing, and would simply use it as a way of identifying each app (browser, music, whatever). They are simply "referring" to a NAT, because, well, there is nothing else at the other end to see, just another one in their system.

Your solution would work perfectly if you were doing that with a regular router, however a NAT box will do that to you. It's fine if it's transparent though.

NAT does not change your MAC, unless you're tunneling, and that's very unlikely on mobile routers. I've never seen, nor was I ever given, information regarding a specific device using NAT, which usually means your IP changes every time you come online.

How do I set up IKEv2 manual connection on iOS?

I am trying to connect an iPhone to a network that has a manual IPSec IKEv2 connection.

Apple iOS 9 uses EAP 6/IKEv2 authentication, but the connection will always prompt me for the certificate with an unknown authority and refuse to authenticate.

Using EAP 6 authentication seems a good option in this case, since iOS will then use the appropriate method that works for IKEv2 connections. But I'm struggling to find any documentation about how to set up an iOS device to work with an IKEv2 enabled network. Apple hasn't released any documentation on it yet. Are there any third party developers out there who have done this? I don't want to need to get into the code of my router!

My router (Netgear N600v) has a built-in VPN option, but not for authentication. You can see the "VPN Settings" panel for more details: And I also want to allow port-forwarding for all devices behind the router for a secure network: Also there is no IKEv2 client app for iOS which you would normally install on your iPhone if you want to do IKEv2 connectivity on iOS. So you probably have to install the server on your iPhone. However we do not know which method does currently Apple uses for EAP authentication, so one could not just provide an own client that does IKEv2 authentication and also a port forward.

But if you use WPA or WPA2 for your Wi-Fi network you could use the same methods to allow forwarding. We have this information in our FAQ page.

If you mean to IKEv2 based VPN tunnel. As per the link you provided, Open vSwitch is used to support IKEv2 by allowing traffic tunnelling with IPsec tunnels, where both the source IP address, destination IP address, source TCP port, and destination TCP port are changed, and it even hides the true identity.

Thus you can have some other devices connect through a Open vSwitch enabled computer instead of you, so there is nothing more to consider of IPsec in your device. As for port forwarding, it will be hard to do that, even if you have a server. Since the device can be anywhere in the world, it will make the job much harder when compared to the local connection.