I'm writing a detailed set of instructions for getting VPN 'on-demand' working with iOS 7.

See Setting Up an iOS 7 On-Demand VPN for the details (it's way too much stuff to post via MacOSXHints, as much as I've been a fan of this site for many years).

The complete set of instructions include:

• setting up an IPSec VPN with iOS
• setting up an OpenVPN with iOS
• setting up a managed iOS device with VPN 'on demand' capabilities (for both IPSec and OpenVPN).

A few comments about this work:

• One of the primary objectives was to document a setup where the VPN-connected iOS device routes all the device's traffic through our network – i.e.:
  • All the iOS device's traffic goes through our network and is encrypted while doing so -- so the cellular data and WiFi parts of the device's traffic can't be monitored.
  • All unencrypted (and normall SSL browsing, etc.) traffic emanates only from our LAN through our network's (land-based/hard-wired) router.
  • This gives our mobile devices the benefit of some site filters provided by our firewall appliance (another 'how to' I have planned).
• A major objective of the on demand aspect of the VPN capability is to have the a VPN connection automatically created whenever the iOS device is either only on a cellular network or on a WiFi network that's not ours (i.e., so the above requirement is automatically fulfilled).
• Both the IPSec and OpenVPN configurations include setups using only user+password/account-based authentication as well as certificate-based authentication.
• Although the iOS device instructions are specific to an iPhone, they also work for other iOS devices -- the user just has to find the equivalent items for the VPN settings.
• Although the server side of the instructions is specific to the pfSense open source router, the setup configuration will apply to many other routers – the user will simply have to find the equivalent settings for that router/VPN appliance.

For anyone interested in a good router, read my Comments About pfSense for a strong but conditional recommendation.

[crarko adds: An ambitious project, and hopefully it should work with iOS 8 as well.]