Configure An OnDemand VPN Connection For OSX or iOS

# September 18, 2017

Basically this config profile configures your device such that whenever a domain specified in the list (starting at line 67) is contacted, it will attempt a lookup using the DNS servers specified. If the DNS servers specified aren’t reachable, it will attempt to establish the connection. You could use DNS servers that don’t exist to get a permanent always on connection, but I would not recommend that as you can’t troubleshoot easily and the non-existent servers could be created at some point by another party.

Save this xml as a .mobileconfig and replace the parts with $TEXT with the relevant info.