I appreciate the response. For clarification I was following the development guides here: https://developer.apple.com/documentation/devicemanagement/vpn/vpn-data.dictionary/ondemandruleselement. from what I can tell I was following them to configure this - I didn't think it was specific to one VPN type to another. I will post in the standard forum and see if someone can help. thanks,