[Nux]

On the subject of VPNs, if people find *swan or Openvpn difficult to get working, I highly recommend OpenConnect (ocserv); _so_ easy to setup.

It's an open source implementation of the Cisco AnyConnect SSL vpn, works great and it's compatible with the AnyConnect clients.

[tehno]

Any good Ansible (or other) recipes for this? One I found is [0] but can you point to any others?

[0] https://github.com/ftao/vpn-deploy-playbook/tree/master/role...

[Nux]

No idea, sorry. But doing it manually only takes 5 minutes: http://www.infradead.org/ocserv/recipes-ocserv-configuration...