IPSEC road warrior setup using the new connections

[phib3r]

I have done a quick search on here and looked at the documentation but I cant seem to find anything like this.

I am trying to setup a Windows Always On machine certificate VPN endpoint using OPNSense - this should be possible. I would like to have multiple VPNs with each derived from different CA issued certificates. Can anyone provide any kind of guidence on this. I will be using ECC certs as this is a requirement. I would like to have mutiple internal CAs issues difference clients say project 1 and project 2 - they hit the end point and depending on which CA provided the cert - drop them into a different IP range.

Any help at all would be very much appreciated.

M