Connect to your HighProxies VPN with the IKEv2 client already built into Windows 10/11, macOS, iPhone and iPad, or with the free strongSwan app on Android. No extra software and no config files: a server address, a username and a password are all you need.
Before you begin
Log in to your VPN Control Panel and copy these three details:
*.highproxies.com hostname of your VPN server. Always use the hostname, never the bare IP: the server certificate is issued for the hostname.Windows has a native IKEv2 client, so the whole setup takes about two minutes and needs no download.
Go to Start > Settings > Network & internet > VPN and click Add VPN (Windows 11) or Add a VPN connection (Windows 10).
Fill in the fields exactly as shown in the table below, type your username and password from the control panel and click Save.
Select HighProxies VPN in the VPN list and click Connect. Confirm your new IP on Check My IP.
| Setting | Value |
|---|---|
| VPN provider | Windows (built-in) |
| Connection name | HighProxies VPN |
| Server name or address | Your HighProxies server hostname |
| VPN type | IKEv2 |
| Type of sign-in info | User name and password |
| User name / Password | From your VPN Control Panel |
These steps apply to macOS 13 Ventura and every newer release, including Sonoma and Sequoia.
Choose Apple menu > System Settings > VPN, click Add VPN Configuration and select IKEv2.
Set Display name to HighProxies VPN and enter your server hostname in both Server address and Remote ID. Leave Local ID empty.
Set User authentication to Username and enter your VPN username and password. Leave Machine authentication on None.
Click Create, then turn on the switch next to HighProxies VPN. The VPN icon appears in the menu bar once connected.
| Field | Value |
|---|---|
| VPN type | IKEv2 |
| Display name | HighProxies VPN |
| Server address | Your HighProxies server hostname |
| Remote ID | Same hostname as Server address |
| Local ID | Leave empty |
| User authentication | Username (with your VPN username and password) |
| Machine authentication | None |
iOS and iPadOS include a native IKEv2 client. The profile stays on the device and can be switched on from Settings at any time.
Open Settings > General > VPN & Device Management > VPN and tap Add VPN Configuration…
Set Type to IKEv2 and fill in the fields from the table below using the details from your control panel.
Tap Done, select the HighProxies profile and switch Status to Connected. A VPN badge appears in the status bar.
| Field | Value |
|---|---|
| Type | IKEv2 |
| Description | HighProxies VPN |
| Server | Your HighProxies server hostname |
| Remote ID | Same hostname as Server |
| Local ID | Leave empty |
| User Authentication | Username |
| Username / Password | From your VPN Control Panel |
On Android, use the free, open-source strongSwan VPN Client from Google Play.
Save both files to your Downloads folder: ISRG Root X1 and E8 cross-signed.
Open strongSwan, go to CA certificates, tap Import certificate and pick isrgrootx1.pem. Repeat for e8-cross.pem and check both appear under Imported.
Tap Add VPN profile and fill in the fields from the table below, then tap Save.
Tap the HighProxies VPN profile and accept Android's VPN connection request the first time you connect.
| Field | Value |
|---|---|
| Server | Your HighProxies server hostname |
| VPN type | IKEv2 EAP (Username/Password) |
| Username / Password | From your VPN Control Panel |
| CA certificate | Select automatically |
| Profile name | HighProxies VPN |
The server certificate could not be validated. Make sure you entered the server hostname, not its IP address, and that Windows Update is current so the Let's Encrypt root is trusted.
Wrong username or password. Copy both again from the VPN Control Panel, watching for trailing spaces, and confirm your VPN service is active.
Check that Remote ID exactly matches the server hostname. If it does, the network may block UDP ports 500 and 4500 – try mobile data or another Wi-Fi network.
Disconnect any other VPN or proxy app, reconnect, then check on Check My IP. You can also verify the server on our status page.
IKEv2 (Internet Key Exchange version 2) is the key-exchange protocol used by IPsec VPNs. It is built into Windows, macOS, iOS and iPadOS, so no extra app is needed, and it reconnects quickly when your device switches between Wi-Fi and mobile data.
IKEv2 uses UDP port 500 and UDP port 4500 for NAT traversal. If a hotel, office or school network blocks these ports, the VPN will not connect on that network.
Not on Windows, macOS, iPhone or iPad, because they already trust the Let's Encrypt root certificate. On Android, import the certificates into the strongSwan app as described in this guide.
The server certificate is issued for the hostname. IKEv2 clients check that the name you connect to matches the certificate, so connecting by IP address fails validation.
Log in to the HighProxies VPN Control Panel at highproxies.com/billing/myvpns.php. The server hostname, username and password are listed for each VPN service.
After connecting, open the HighProxies Check My IP tool. It should show the IP address and location of your HighProxies VPN server instead of your own.
HighProxies VPN gives you a private, dedicated IP over IKEv2 for remote work, whitelisted access and secure browsing. Questions about setup? Email support@highproxies.com or read our setup guides.