<!--
{
  "availability" : [
    "iOS: 8.0.0 -",
    "iPadOS: 8.0.0 -",
    "macCatalyst: 13.1.0 -",
    "macOS: 10.11.0 -",
    "tvOS: 17.0.0 -",
    "visionOS: 1.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "NetworkExtension",
  "identifier" : "/documentation/NetworkExtension/NEVPNProtocolIKEv2",
  "metadataVersion" : "0.1.0",
  "role" : "Class",
  "symbol" : {
    "kind" : "Class",
    "modules" : [
      "Network Extension"
    ],
    "preciseIdentifier" : "c:objc(cs)NEVPNProtocolIKEv2"
  },
  "title" : "NEVPNProtocolIKEv2"
}
-->

# NEVPNProtocolIKEv2

Settings for an IKEv2 VPN configuration.

```
class NEVPNProtocolIKEv2
```

## Overview

Instances of this class are thread safe.

## Topics

### Accessing IKEv2 Security Association parameters

[`IKESecurityAssociationParameters`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/ikeSecurityAssociationParameters)

An [`NEVPNIKEv2SecurityAssociationParameters`](/documentation/NetworkExtension/NEVPNIKEv2SecurityAssociationParameters) object containing the parameters for the initial IKE security association to be negotiated with the IKEv2 server.

[`childSecurityAssociationParameters`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/childSecurityAssociationParameters)

An [`NEVPNIKEv2SecurityAssociationParameters`](/documentation/NetworkExtension/NEVPNIKEv2SecurityAssociationParameters) object containing the parameters for the child IPSec security associations to be negotiated for each IKEv2 policy.

[`NEVPNIKEv2SecurityAssociationParameters`](/documentation/NetworkExtension/NEVPNIKEv2SecurityAssociationParameters)

Parameters for an IKEv2 Security Association.

### Accessing certificate properties

[`serverCertificateIssuerCommonName`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/serverCertificateIssuerCommonName)

A string containing the value of the Subject Common Name field of the Certificate Authority certificate that issued the IKEv2 server’s certificate.

[`serverCertificateCommonName`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/serverCertificateCommonName)

A string containing the value of the Subject Common Name field of the IKEv2 server’s certificate.

[`certificateType`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/certificateType)

The type of the certificate in the identity configured in `identityReference` or `identityData`.

[`NEVPNIKEv2CertificateType`](/documentation/NetworkExtension/NEVPNIKEv2CertificateType)

An enumeration of certificate type values.

### Accessing TLS version properties

[`minimumTLSVersion`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/minimumTLSVersion)

The minimum TLS version to allow for EAP-TLS authentication.

[`maximumTLSVersion`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/maximumTLSVersion)

The minimum TLS version to allow for EAP-TLS authentication.

[`NEVPNIKEv2TLSVersion`](/documentation/NetworkExtension/NEVPNIKEv2TLSVersion)

An enumeration of TLS Versions for use in EAP-TLS.

### Accessing other IKEv2 properties

[`deadPeerDetectionRate`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/deadPeerDetectionRate)

The frequency at which the IKEv2 client will run the dead peer detection algorithm.

[`NEVPNIKEv2DeadPeerDetectionRate`](/documentation/NetworkExtension/NEVPNIKEv2DeadPeerDetectionRate)

An enumeration of values for the frequency at which the IKEv2 client runs the dead peer detection algorithm.

[`useConfigurationAttributeInternalIPSubnet`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/useConfigurationAttributeInternalIPSubnet)

A Boolean indicating whether or not the IKEv2 client should use the INTERNAL_IP4_SUBNET and/or INTERNAL_IP6_SUBNET attributes sent by the IKEv2 server.

[`disableMOBIKE`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/disableMOBIKE)

A Boolean indicating whether or not MOBIKE should be disabled for the IKEv2 sessions.

[`disableRedirect`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/disableRedirect)

A Boolean indicating whether or not IKEv2 server redirects are disabled.

[`enablePFS`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/enablePFS)

A Boolean indicating whether or not Perfect Forward Secrecy is enabled.

[`enableRevocationCheck`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/enableRevocationCheck)

Enable revocation checking of the IKEv2 server certificate.

[`strictRevocationCheck`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/strictRevocationCheck)

Require a “not revoked” result when checking if the certificate identifying the server is revoked.

[`mtu`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/mtu)

The Maximum Transmission Unit (MTU) size in bytes to assign to the tunnel interface.

### Supporting Wi-Fi assist

[`enableFallback`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/enableFallback)

A property to enable the use of cellular data when Wi-Fi connectivity is poor.

### Supporting quantum-secure cryptography

[`allowPostQuantumKeyExchangeFallback`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/allowPostQuantumKeyExchangeFallback)

A Boolean value that indicates whether servers that don’t support post-quantum key exchanges can skip them.

[`ppkConfiguration`](/documentation/NetworkExtension/NEVPNProtocolIKEv2/ppkConfiguration)

The configuration for a post-quantum pre-shared key (PPK).

[`NEVPNIKEv2PPKConfiguration`](/documentation/NetworkExtension/NEVPNIKEv2PPKConfiguration)

A class that manages parameters of a post-quantum pre-shared key (PPK).

## Relationships

### Conforms To

[`CVarArg`](/documentation/Swift/CVarArg)

[`CustomDebugStringConvertible`](/documentation/Swift/CustomDebugStringConvertible)

[`NSCoding`](/documentation/Foundation/NSCoding)

[`NSCopying`](/documentation/Foundation/NSCopying)

[`NSSecureCoding`](/documentation/Foundation/NSSecureCoding)

[`CustomStringConvertible`](/documentation/Swift/CustomStringConvertible)

[`Hashable`](/documentation/Swift/Hashable)

[`NSObjectProtocol`](/documentation/ObjectiveC/NSObjectProtocol)

[`Equatable`](/documentation/Swift/Equatable)

### Inherits From

[`NEVPNProtocolIPSec`](/documentation/NetworkExtension/NEVPNProtocolIPSec)

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)