apt-get install strongswan-ikev2 libstrongswan-extra-plugins libcharon-extra-plugins

/etc/ipsec.conf
conn windscribe
    keyexchange=ikev2
    dpdaction=restart
    dpddelay=300s
    eap_identity=<<USER>>
    leftauth=eap-mschapv2
    left=%defaultroute
    leftsourceip=%config
    right=<<ADDRESS>>
    rightauth=pubkey
    rightsubnet=0.0.0.0/0
    rightid=%any
    type=tunnel
    auto=add
	
	
/etc/ipsec.secrets
<<USER>> : EAP "<<PASSWORD>>"


rmdir /etc/ipsec.d/cacerts && ln -s /etc/ssl/certs /etc/ipsec.d/cacert && ln -s /etc/ssl/certs /etc/ipsec.d/cacerts

ipsec restart && ipsec up windscribe