Install packages

[root@localhost ~]# dnf install NetworkManager-strongswan NetworkManager-strongswan-gnome strongswan-charon-nm

Configure VPN

[root@localhost ~]# nm-connection-editor &

Add
VPN -> IPsec/IKEv2 (strongswan)
Create

Connection name: IoA VPN
Address: vpn.ast.cam.ac.uk
Certficate: Path to ast-vpn.crt (Server certificate needs to be copied from:
https://help.uis.cam.ac.uk/devices-networks-printing/remote-access/uis-v...)

Authentication: EAP
Username: "CRSid"@cam.ac.uk

Tick "Request an inner IP address"

Save

Close

Click on wireless icon in top bar
Select VPN
Select Connect

The password it asks you for is your UIS Network Authentication Token (16 characters)