The Persistent Tunnel
Virtual Private Networks (VPNs) are essential tools for securing your internet traffic on public Wi-Fi or accessing corporate intranets remotely. macOS allows you to configure VPN connections directly within the operating system, bypassing the need for third-party client apps. However, if you check the wrong box during setup, macOS can become overly aggressive, attempting to establish that VPN connection automatically the moment it detects any network activity. If the VPN server is slow, offline, or requires two-factor authentication, this automatic attempt will stall your internet connection entirely, forcing you to manually cancel the connection process before you can even load a simple webpage.
Severing the Auto-Connect Link
To regain control over your network routing and stop macOS from automatically connecting to VPNs in the background, you must delve into the advanced network settings and sever the automatic trigger.
Click the Apple logo in the extreme top-left corner of your screen and select System Settings. In the left-hand navigation sidebar, click on VPN (or “Network” on older versions of macOS). You will see a list of your configured VPN profiles on the right. Find the VPN that keeps launching automatically and click the small ‘i’ (info) icon next to it. In the detailed settings window that appears, look for a specific toggle switch named Connect on demand. When this is active, macOS tries to establish the tunnel automatically based on DNS requests or network availability. Click the toggle to turn it Off. Click OK or Done to save. The VPN profile will remain configured, but you will now have to manually click “Connect” whenever you actually need the secure tunnel.