I handle this via a script in the VPN's config