# Virtual Private Network(VPN)

Last updated: August 14, 2026

This page explains how IT admins can configure Chromebook VPN profiles using MDM to ensure secure remote access to organizational resources. It covers the two supported connection types — Open VPN and L2TP — detailing their profile specifications including remote host settings, authentication credentials, communication protocols, and proxy configuration options. The dynamic variable %username% simplifies user-specific deployments. FAQs address supported VPN types, user assignment, and proxy setup, helping admins quickly understand configuration requirements for Chromebook VPN deployment.

A Virtual Private Network(VPN) as the name suggests establishes a logical private tunnel on the Internet, to ensure only authorized users can access confidential web resources of the organization, from any network. VPN ensures all the device-web resource communication happens on a secure channel preventing any kind of unauthorized access. VPN also boosts productivity as it ensures employees can work from anywhere, without worrying about lack of access to specific resource/data. With mobile devices extensively becoming a part of corporate productivity, it has become mandatory for IT admins to configure on VPN on mobile devices, which can be easily and efficiently done using MDM.

## Profile Description

### Open VPN

| Profile Specification | Description |
|---|---|
| **COMMON PARAMETERS** |  |
| Connection Name | Specify the name, which needs to be displayed as the VPN name on the end user's mobile device |
| Connection Type | The VPN type, to be provisioned on the device |
| **OPEN VPN-SPECIFIC PARAMETERS** |  |
| Remote Host | The host to be contacted by the Chromebook to establish VPN connection. |
| Remote Host Port | The port on which the remote host is to be contacted |
| User Name | The user to whom this VPN configuration is to be applied. Using the dynamic variable **%username%** fetches the user name from the enrollment details |
| Password | Specify the password to be user for initial user authentication. |
| Protocol | Specify the communication protocol to be used. |
| **CONFIGURE PROXY** |  |
| Proxy Settings | Manual or Automatic |
| Server URL **(Can be configured only if Proxy Settings is Automatic)** | Specify the URL, which contains the proxy file. |
| Server **(Can be configured only if Proxy Settings is Manual)** | Specify the proxy server to be used. |
| Port **(Can be configured only if Proxy Settings is Manual)** | Specify the proxy port to be used. |
| User Name **(Can be configured only if Proxy Settings is Manual)** | User Name of the device, (%username%)will get the appropriate User Name, mapped to the device |
| Password **(Can be configured only if Proxy Settings is Manual)** | User password for initial connection |
| Certificate | Specify the certificate to be used for Client-Based Authentication(CBA). |

### L2TP

| Profile Specification | Description |
|---|---|
| **COMMON PARAMETERS** |  |
| Connection Name | Specify the name, which needs to be displayed as the VPN name on the end user's mobile device |
| Connection Type | The VPN type, to be provisioned on the device |
| **L2TP-SPECIFIC PARAMETERS** |  |
| Server Name / IP Address | Host name or IP address of the VPN server |
| Remote Host | The host to be contacted by the Chromebook to establish VPN connection. |
| Remote Host Port | The port on which the remote host is to be contacted |
| User Name | The user to whom this VPN configuration is to be applied. Using the dynamic variable **%username%** fetches the user name from the enrollment details |
| Password | Specify the password to be user for initial user authentication. |
| Protocol | Specify the communication protocol to be used. |
| **CONFIGURE PROXY** |  |
| Proxy Settings | Manual or Automatic |
| Server URL **(Can be configured only if Proxy Settings is Automatic)** | Specify the URL, which contains the proxy file. |
| Server **(Can be configured only if Proxy Settings is Manual)** | Specify the proxy server to be used. |
| Port **(Can be configured only if Proxy Settings is Manual)** | Specify the proxy port to be used. |
| User Name **(Can be configured only if Proxy Settings is Manual)** | User Name of the device, (%username%)will get the appropriate User Name, mapped to the device |
| Password **(Can be configured only if Proxy Settings is Manual)** | User password for initial connection |
| Certificate | Specify the certificate to be used for Client-Based Authentication(CBA). |

## Frequently Asked Questions

**Which VPN types can I configure on Chromebooks?**  
Mobile Device Manager Plus supports Open VPN and L2TP connection types for Chromebooks, each with its own set of connection and proxy parameters.

**How does a Chromebook know which user a VPN profile belongs to?**  
Use the dynamic variable %username% in the User Name field; it automatically fetches the correct user name from the device's enrollment details.

**Can I configure a proxy along with the VPN connection?**  
Yes, both Open VPN and L2TP profiles let you configure Proxy Settings as Manual or Automatic, including proxy server, port, and authentication details.