Supported Native VPN Protocols in macOS 13

Apple's macOS 13 (Ventura) includes a built-in VPN client that allows users to establish secure network connections without installing third-party applications. This article outlines the specific VPN protocols supported natively by macOS 13, their primary use cases, and notable protocol omissions that require external software.

Native VPN Protocols in macOS 13

When configuring a connection manually through macOS 13's redesigned System Settings, the operating system natively supports three primary VPN protocols:

1. IKEv2 (Internet Key Exchange version 2)

  • Status: Recommended / Default
  • Security: High
  • Details: IKEv2 is the primary and most modern protocol natively supported by macOS. It operates alongside IPsec to provide strong encryption, robust data integrity, and fast connection speeds. One of its main advantages is seamless reconnection capabilities when switching between Wi-Fi networks or moving between Wi-Fi and mobile hotspots. It supports authentication via user credentials, certificates, or machine authentication.

2. L2TP over IPsec (Layer 2 Tunneling Protocol)

  • Status: Supported (Legacy compatibility)
  • Security: Moderate
  • Details: L2TP does not provide encryption on its own, so macOS pairs it with IPsec encryption. This protocol is typically used to connect to older corporate networks or traditional network appliances. It supports authentication using pre-shared keys (secrets) or digital certificates in addition to standard username/password credentials.

3. Cisco IPsec

  • Status: Supported (Legacy enterprise)
  • Security: Moderate to High
  • Details: Built specifically for legacy enterprise environments utilizing Cisco hardware and software gateways. It allows direct connection to Cisco-compatible VPN servers using group names, shared secrets, or certificates alongside user credentials.

Protocols Not Natively Supported

While macOS 13 includes robust tools for the protocols above, popular modern standards are not supported out of the box through the native configuration interface:

  • OpenVPN: Requires third-party software (such as Tunnelblick or official OpenVPN clients).
  • WireGuard: Requires the official WireGuard app or supported third-party providers.
  • PPTP (Point-to-Point Tunneling Protocol): Completely removed from macOS due to severe cryptographic vulnerabilities.
  • SSTP (Secure Socket Tunneling Protocol): Proprietary to Microsoft; requires dedicated third-party clients.

Accessing Built-In VPN Settings

To set up any of the native protocols in macOS 13:

  1. Open System Settings.
  2. Click VPN in the sidebar.
  3. Click the Add VPN Configuration menu (or the arrow next to it).
  4. Select IKEv2, L2TP over IPsec, or Cisco IPsec.
  5. Enter your server address, account name, and authentication credentials to connect.