Never tried, but you can refer to openconnect.

Why not use WireGuard?