There are different methods for providing a VPN server for roaming (dynamic) clients. Which method to use depends on the clients that need to be supported. # libreswan /etc/ipsec.conf configuration ...