How to Set up a VPN server

1 Prepare an Apple router

Open AirPort Utility and ensure Back to My Mac is disabled. On the Internet tab, click Internet Options and turn on ‘Use dynamic global hostname’, then enter your dynamic address and your DDNS account credentials. Click Save.

2 Third- party router setup

When using an Apple router, the Server app will set up all required ports for you, so click Update to finish and then skip to step four. If you have a third-party router, though, start by giving it your dynamic address and DDNS account.

3 Forward ports

You’ll also need to manually set your router’s port forwarding settings to open the necessary ports for the VPN. Create separate rules to forward ports 500, 1701 and 4500 (all using the UDP protocol) to your server’s IP address on your network.

4 Set up macOS Server

Open the Server app on the Mac you’re using as a server. Click Edit Host Name on the main screen, click Next, verify the correct connection is selected (Ethernet or Wi-Fi), then click Next again and select Local Network and VPN.

5 Finish the host name

Click Next, then change Host Name to something more descriptive – for example, server.yourname.private. Click Finish followed by Change Host Name, click Set up DNS, leave the default settings alone, and then click Save.

6 Enable the VPN

Select VPN in the left pane. Set the VPN Host Name item to your dynamic DNS address. Reveal the current shared secret and change it if you want, but avoid an easily guessable password. Use the switch (top right) to turn on the VPN.

7 Verify the VPN is on

If you’ve configured your ports and dynamic address correctly, you should see confirmation that the VPN server is ‘reachable over the internet’ – if the VPN page says it can’t determine reachability, review your settings.

8 Tweak settings

Click Edit Permissions if you want to restrict VPN access to specific users only. Click Edit Addresses to ensure the VPN assigns IP addresses to remote devices that won’t clash with your router’s DHCP server. When done, click Restart VPN.

9 Send to other Macs

Click Save Profile to create a file that simplifies setting up other Macs to connect to the VPN. Transfer the file to another Mac, double-click it there, then follow the prompts. To connect to the VPN, use the Network preferences pane.