Advanced users can optionally customize IKEv2 options. Advanced users can optionally specify a DNS name for the IKEv2 server address. The DNS name must be a fully qualified domain name (FQDN). Example: sudo VPN_DNS_NAME='vpn.example.com' sh vpn.sh Similarly, you may specify a name for the first IKEv2 client. The default is vpnclient if not specified. sudo VPN_CLIENT_NAME='your_client_name' sh vpn.sh By default, clients are set to use Google Public DNS when the VPN is active. You may specify custom DNS server(s) for all VPN modes. Example: sudo VPN_DNS_SRV1=1.1.1.1 VPN_DNS_SRV2=1.0.0.1 sh vpn.sh By default, no password is required when importing IKEv2 client configuration. You can choose to protect client config files using a random password. sudo VPN_PROTECT_CONFIG=yes sh vpn.sh ================================== /etc/ipsec.d/ikev2.conf /etc/ipsec.conf /etc/xl2tpd/xl2tpd.conf ================================== Edit /etc/ipsec.d/ikev2.conf on the VPN server. Replace rightaddresspool=192.168.43.10-192.168.43.250 with e.g. rightaddresspool=192.168.43.100-192.168.43.250. This reduces the pool of auto-assigned IP addresses, so that more IPs are available to assign to clients as static IPs.