http://h7isucmawckzflxhipflydxvxpaytk5fozfk5immffg66rhboc74yxyd.onion/doku.php?id=virtual_private_networks&do=edit
In addition to it being "always-on" or "on-demand", you may also want to mandate the VPN connection, so that you and your users cannot disable it.
===Always-on / on-demand VPNs may not work well with public Wi-Fi ===
If you are connecting to [[public_wi-fi|public Wi-Fi]] which requires you to put in some details, it [[public_wi-fi#Wi-Fi which requires a login may not work if you use a VPN|may not...