Always-On IPsec VPN with Google Device Management

Set general VPN information

1.     Sign in to the Google Admin console.
2.      Click Device management > Network > VPN.
3.      Choose the appropriate organization from the list on the left.
4.      At the bottom, click Add VPN.
5.      Enter a name for the VPN.
6.      Enter the IP address or the full server hostname of the server that provides access to the VPN in the Remote host box.
7.      Check the Automatically connect box.

Configure VPN settings

Using L2TP over IPsec with Pre-Shared Key:

1.      Enter the pre-shared key needed to connect to the VPN. This value will no longer be visible after you save the configuration.
2.      Enter a username to connect to the VPN. The username supports username variables.  Examples of variable names

${LOGIN_ID} The current user's username (example: jsmith).

${LOGIN_EMAIL} The current user's full email address (example: jsmith@your_domain.com).

3.      Enter password. If you’re using a username variable, don’t enter password. This value will no longer be visible after you save the configuration.

Here is an example of a configuration via Google Admin Console.