Configuration guides
Step-by-step setup for every platform we support — apps, gateways, routers, firewalls, and clouds.
FortiGate: site-to-site IKEv2 tunnel to a VPNGeek gateway
Build a route-based IKEv2 tunnel between a FortiGate firewall and a VPNGeek gateway — phase 1, phase 2, routing, and firewall policy, end to end.
15 min · Updated Jul 2026Deploy your first site-to-site tunnel
Connect two networks end to end from the VPNGeek dashboard — create a gateway at each site, deploy the config bundle, define the tunnel, and verify traffic with the live counters.
14 min · Updated Jul 2026Windows app: split tunneling per application
Send only chosen apps through the VPN and keep the rest on your normal connection.
6 min · Updated Jul 2026Remote access: client-to-site VPN for a team
Stand up a roadwarrior gateway from the VPNGeek dashboard so individual users connect into your network — client pool, pushed routes and DNS, per-seat users, and split-tunnel choices.
13 min · Updated Jul 2026Tunnel up but no traffic? A checklist
Selectors, routes, firewall, NAT, overlaps, and MTU — the six things to check, in order, when phase 1 and 2 are up but no data flows.
9 min · Updated Jul 2026macOS & iOS: install the VPNGeek profile and connect
Install the VPNGeek configuration profile on your Apple device, allow the VPN, and connect automatically on demand.
6 min · Updated Jul 2026AWS Site-to-Site VPN: connect a VPC to a VPNGeek gateway
Connect an AWS VPC to a VPNGeek gateway over an IKEv2 Site-to-Site VPN — customer gateway, VPN connection with two tunnels, and static or BGP routing, end to end.
20 min · Updated Jun 2026pfSense: site-to-site IKEv2 tunnel to a VPNGeek gateway
Connect a network behind pfSense to a VPNGeek gateway with a policy-based IKEv2 tunnel — Phase 1, Phase 2, the IPsec firewall rules, and the route that ties it together.
14 min · Updated Jun 2026Android: always-on VPN and kill switch
Keep the VPNGeek tunnel always on and block traffic whenever it drops on Android.
6 min · Updated Jun 2026Azure VPN Gateway: connect a VNet to a VPNGeek gateway
Connect an Azure virtual network to a VPNGeek gateway over a route-based IKEv2 VPN — VNet gateway, local network gateway, connection with a custom IPsec/IKE policy, end to end.
20 min · Updated Jun 2026MikroTik RouterOS: site-to-site IKEv2 tunnel to a VPNGeek gateway
Build a policy-based IKEv2 IPsec tunnel from a MikroTik RouterOS 7 device to a VPNGeek gateway — peer, identity, proposals, policy, and the NAT-bypass rule that makes traffic flow.
15 min · Updated Jun 2026Linux: connect with the VPNGeek CLI
Install the VPNGeek command-line client, connect to a location, enable the kill switch, and autostart it with systemd.
8 min · Updated Jun 2026Google Cloud VPN: connect a VPC to a VPNGeek gateway
Connect a Google Cloud VPC to a VPNGeek gateway over IKEv2 IPsec — HA VPN with Cloud Router and BGP, or Classic VPN with static routes, end to end.
22 min · Updated Jun 2026Check Point: site-to-site IKEv2 tunnel to a VPNGeek gateway
Connect a Check Point Security Gateway to a VPNGeek gateway with an IKEv2 VPN — an interoperable device, a VPN community, the encryption domain, and the access rule that permits the traffic.
16 min · Updated Jun 2026IKE phase 1 & phase 2 negotiation failures
The tunnel never comes up — decode the negotiation logs to find the PSK, proposal, DH group, lifetime, ID, or port mismatch that is blocking it.
11 min · Updated Jun 2026Any firewall: the universal IKEv2 parameters for a VPNGeek tunnel
A vendor-neutral reference for the IKEv2 parameters every firewall needs — endpoints, PSK, IKE and ESP proposals, DH group, lifetimes, and traffic selectors — plus a checklist to map them onto any device.
12 min · Updated Jun 2026MTU and fragmentation over IPsec
Tunnel is up and small pings work, but large transfers, HTTPS, and SSH hang — encapsulation overhead and PMTUD blackholes, and how to fix them.
10 min · Updated Jun 2026Cisco IOS: site-to-site IKEv2 tunnel to a VPNGeek gateway
Build a route-based IKEv2 tunnel from a Cisco IOS router to a VPNGeek gateway — IKEv2 proposal, policy, keyring and profile, an IPsec profile, and a tunnel interface with a route.
16 min · Updated Jun 2026Ubiquiti EdgeRouter: site-to-site IKEv2 tunnel to a VPNGeek gateway
Build a policy-based IKEv2 IPsec tunnel from a Ubiquiti EdgeRouter (EdgeOS) to a VPNGeek gateway — IKE group, ESP group, site-to-site peer, and the NAT-exclude rule, with a UniFi note.
14 min · Updated Jun 2026Missing a platform?
Tell us what you're connecting — we write guides for what people actually deploy.