An IPSec "Always on" VPN profile for your iPhone, iPad, or Mac

VPNProfile.xml

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>UserDefinedName</key>
			<string>MY_PROFILE_NAME</string>
			<key>PayloadDisplayName</key>
			<string>MY_PROFILE_NAME</string>
			<key>PayloadIdentifier</key>
			<string>MY_DOMAIN.vpn.always</string>
			<key>PayloadUUID</key>
			<string>84590314-C064-4E06-85DB-B5F6B2B7C71F</string>
			<key>VPNType</key>
			<string>IPSec</string>
			<key>IPSec</key>
			<dict>
				<key>RemoteAddress</key>
				<string>MY_STRONGSWAN_SERVER_IP_ADDRESS</string>
				<key>AuthenticationMethod</key>
				<string>SharedSecret</string>
				<key>XAuthEnabled</key>
				<integer>1</integer>
				<key>XAuthName</key>
				<string>MY_ACCOUNT_NAME</string>
				<key>XAuthPassword</key>
				<string>MY_ACCOUNT_PASSWORD</string>
				<key>LocalIdentifierType</key>
				<string>KeyID</string>
			</dict>
			<key>OnDemandEnabled</key>
			<integer>1</integer>
			<key>OnDemandRules</key>
			<array>
				<dict>
					<key>Action</key>
					<string>Connect</string>
				</dict>
			</array>
			<key>OverridePrimary</key>
			<true/>
			<key>IPv4</key>
			<dict>
				<key>OverridePrimary</key>
				<integer>1</integer>
			</dict>
			<key>PayloadType</key>
			<string>com.apple.vpn.managed</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
		</dict>
	</array>
	<key>PayloadDisplayName</key>
	<string>VPN Configuration</string>
	<key>PayloadIdentifier</key>
	<string>MY_INITIALS.488B9D52-412A-458B-9701-92A5DA7CDA16</string>
	<key>PayloadRemovalDisallowed</key>
	<false/>
	<key>PayloadType</key>
	<string>Configuration</string>
	<key>PayloadUUID</key>
	<string>CF1A90EC-2A3E-4C88-B935-045C5882621D</string>
	<key>PayloadVersion</key>
	<integer>1</integer>
</dict>
</plist>