I am using this libreswan setup[1] I was wondering what would be the best practice to assign the same ip (from the rightaddresspool) to a client using a specific certificate. Maybe based on this rightid=%fromcert? [1] https://libreswan.org/wiki/VPN_server_for_remote_clients_using_IKEv2_split_VPN