The setup is covered in the VIA App Note on the VRD Site. Refer to Chapter 5; specifically the section titled Configuring VPN Server for IKEv2; page 25.
Considerations:
- Do you have your PKI built
- Do your controllers have certificates that will be trusted by the clients (same PKI or other is fine)
- Certificates must be in the User store; not computer for Windows
- The initial profile download for the client is done through username and password, not TLS
- The controller cannot terminate PEAP for VIA authentications as it can for wirelss; your RADIUS server will need to do this