Manual configuration on FortiClient (VPN Only) for MacOS: Can it be done ?

Forum|Forum|23 days ago
July 21, 2026
4 replies
119 views

Hi everyone,

I wanted to know if it's possible to manually edit these parameters on the unlicenced FortiClient (VPN Only) version for MacOS ?

See the image below:

In particular, I need to be sure whether the <eap_method>2</eap_method> parameter (which corresponds to EAP-TTLS/PAP) can actually be configured.

I'd like to know if anyone on MacOS has managed to apply these settings, or if I'm forced to purchase the FortiClient Standalone Edition (the client doesn't have the option to buy an EMS server).

For additional context regarding my question: currently, we have an IPsec Remote Access VPN setup using IKEv2 + LDAP + MFA (via SMS).

Thank you all in advance.

Best answer by funkylicious

FortiClient free-vpn for MacOS supports IKEv2 ( its not greyed out in the GUI ) starting with 7.4.3 - i can confirm that, since I also use a MacOS device.

in older versions prior to 7.4.3, where IKEv2 cannot be selected ( its greyed out ) you can export the config file ( without a password ) , edit the version param to 2 and then import it back and it should work.

funkylicious

SuperUser

should work, https://docs.fortinet.com/document/forticlient/7.4.3/xml-reference-guide/96295/ike-settings

as for IKEv2 on MacOS it starts supporting it with version 7.4.3

"jack of all trades, master of none"

MandalorianAuthor

Explorer III

Hi @funkylicious ,

Thank you for your kind reply.

From the documentation you sent me, I saw that those parameters can indeed be verified, but now the issue is a different one.

The MacOS client needs to be licensed (FortiClient Standalone Edition) with IKEv2 enabled, since the free VPN-only version on MacOS doesn't support IKEv2 at all.

Has anyone managed to solve this issue on FortiClient (VPN Only) for MacOS ? Has anyone found a way to force-enable the IKEv2 option somehow ?

Thank you all in advance.

"This is the way"

funkyliciousAnswer

SuperUser

FortiClient free-vpn for MacOS supports IKEv2 ( its not greyed out in the GUI ) starting with 7.4.3 - i can confirm that, since I also use a MacOS device.

in older versions prior to 7.4.3, where IKEv2 cannot be selected ( its greyed out ) you can export the config file ( without a password ) , edit the version param to 2 and then import it back and it should work.

"jack of all trades, master of none"

Sign up

Login with SSO

Login to the community

Login with SSO