IKEV2 is fast and secure and mobile-friendly VPN protocol.
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228290-253662-vpn-compare.png)
Since it has no interface, it is a little complex to create.
Here are the steps:
Add CA
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228294-391717-create-ca-ikev2-1.png)
Sign It
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228295-233379-create-ca-ikev2-2.png)
Add Server Certificate
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228291-26072-create-server-ca-ikev2-3.png)
Sign It with CA
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228292-736659-create-server-ca-ikev2-4.png)
Add Client Certificate
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228293-986021-create-client-ca-ikev2-5.png)
Sign It with CA
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228293-134059-create-client-ca-ikev2-6.png)
Export CA for Clients (for iOS)
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228294-825393-export-ca-17.png)
Export Client Certificate (for iOS)
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228293-561418-export-ca-client-16.png)
Add ip pool for IKEV2 (better calculate online)
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228296-95936-create-pool-7.png)
Add mode config for Ikev2
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228290-3527-mode-config-8.png)
Add Proposal for Ikev2
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228295-700119-proposal-9.png)
Create Group for Ikev2
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228290-605488-group-10.png)
Create Policy for Ikev2
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228291-425522-policy-11.png)
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228291-787894-policy-12.png)
Add profile for Ikev2
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228292-258310-profile-13.png)
Add Peers for Ikev2
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228289-643553-peers-14.png)
Add Identity for Ikev2
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228289-251097-identity-15.png)
Now, Ikev2 server in RouterOS is finished.
Download the exported two files, CA and CA client.
And copy to iPhone iCloud .
Install the two certificates.
Add VPN Ikev2 (it is default vpn protocol in iOS)
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628228962-190337-ikev2-ios.jpg)
![](https://forum.tinyserve.com/assets/files/2021-08-06/1628229320-160617-ikev-ios2.jpg)
Done!