When configuring a VPN payload for iOS in Cisco Meraki’s Systems Manager, the Local Identifier is typically the identifier for your client or device, which could be an app ID, a user principal name (UPN), or an email address. The Remote Identifier is used to identify the VPN server or the remote end of the VPN connection. It’s often set to the server’s domain name or IP address.
For IKEv2 VPN connections, the Local Identifier can be the user’s email address or another unique identifier, and the Remote Identifier would be the VPN server’s address. If you’re using a custom VPN client, the app bundle ID might be used as part of the VPN configuration, but it’s not typically the Local Identifier.
In Systems Manager, if you’re setting up a manual VPN configuration, you’ll have the option to specify these identifiers. If you’re using Sentry VPN, which automates the VPN setup process, the identifiers may be managed automatically based on the settings of the MX Security Appliance or VM Concentrator in your Dashboard organization.
If you’re unsure about the correct identifiers to use, it’s best to consult with your VPN service provider or network administrator to ensure that the identifiers match the VPN server’s configuration. Additionally, you can refer to the Systems Manager VPN Configurations and Sentry VPN documentation for more detailed instructions on setting up VPN payloads in Systems Manager.
Systems Manager VPN Configurations and Sentry VPN - Cisco Meraki
Systems Manager Logging and Troubleshooting - Cisco Meraki
I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.
Please, if this post was useful, leave your kudos and mark it as solved.
