Loading
Checking your account.
I already have VPN access
Enter your existing VPN login and password. Then sign in or register to link your access.
Existing VPN access
My VPN
Quick setup for this device, or manual setup with your own settings.
IKEv2 — built-in VPN on iPhone, iPad and Windows. Android uses the strongSwan VPN Client app.
AnyConnect — VPN through Cisco Secure Client, using TLS/HTTPS.
Quick setup currently supports IKEv2. For AnyConnect, use manual setup.
Start quick setupVPN access
Sign in to manage your VPN access and devices.
Helps you recognize this key when signing in.
Create a Passkey to manage your existing VPN access. Your VPN login and password will be preserved.
Recover account
Enter your Recovery Code. If it is valid, you will create a new Passkey for this account.
Save your Recovery Code
This code can restore access if you lose all Passkeys. TOLF cannot show this code again.
Windows devices
Prepare a separate VPN connection for your Windows computer.
Choose the VPN location and routing for each Windows computer.
Added computers
VPN Entry Point
Additional VPN settings
Local ID controls how the VPN server routes traffic. Leave empty to use this server’s default mode.
After changing Local ID, generate and install a new profile to apply the routing change.
Checks whether the VPN server responds. High means more frequent checks.
Allows the tunnel to follow network or IP address changes when supported by the server.
Changes take effect after you generate and install an updated profile.
Connect automatically on all networks.
Wi-Fi network rules are checked before the default actions.
On Android, Always-on VPN is configured separately in system settings.
strongSwan server settings
DPD checks whether the VPN connection is alive. The server controls its interval and action when the connection is lost.
MOBIKE supports network changes, such as Wi-Fi → mobile data. It is used when enabled on both the server and in strongSwan.
DPD is configured on the server; MOBIKE use is negotiated when connecting. These parameters are not configured on this page. Their current settings on the selected server are not displayed here.
Automatic uses the DNS servers supplied by the selected VPN entry point.
Enter IPv4 or IPv6 addresses separated by commas or spaces.
Routing Rules
Send selected websites through a specific exit. These rules take priority over Local ID.
Changing the VPN password creates a new configuration profile. The new VPN password is included in the new Mobile Config file. You’ll need to install the new profile on your Apple devices.