How did you set up vpn policy exactly?