diff --git a/hosts b/hosts
index 7140928..a914079 100644
--- a/hosts
+++ b/hosts
@@ -29,6 +29,7 @@ ntp-1.int.infra.auro.re
 ntp-2.int.infra.auro.re
 prometheus-1.monit.infra.auro.re
 prometheus-2.monit.infra.auro.re
+vpn-1.back.infra.auro.re
 
 ###############################################################################
 # Aurore : main services
diff --git a/playbooks/ip_forward.yml b/playbooks/ip_forward.yml
index 0acf5b4..85073cb 100755
--- a/playbooks/ip_forward.yml
+++ b/playbooks/ip_forward.yml
@@ -5,6 +5,7 @@
     - edge-2.back.infra.auro.re
     - infra-1.back.infra.auro.re
     - infra-2.back.infra.auro.re
+    - vpn-1.back.infra.auro.re
   roles:
     - ip_forward
 ...
diff --git a/playbooks/knotd.yml b/playbooks/knotd.yml
index 7405242..054e733 100755
--- a/playbooks/knotd.yml
+++ b/playbooks/knotd.yml
@@ -367,6 +367,11 @@
           ssh-2.mgmt:
             - 10.128.10.101
             - 2a09:6840:128::10:101
+          vpn-1.back:
+            - 10.128.10.11
+            - 2a09:6840:128::10:11
+            - 10.128.10.111
+            - 2a09:6840:128::10:111
           infra-1.back:
             - 10.128.10.4
             - 2a09:6840:128::10:4
@@ -486,20 +491,6 @@
                            | combine(knotd__hosts['adh.auro.re']
                                      | ip_filter(['2a09:6840::/32'])
                                      | add_origin_keys('adh.auro.re.')) }}"
-        #reverse: "{{ nb_dns_reverse(ranges={'45.66.108.0/24'},
-        #                            vlan_suffixes=nb__dns_vlan_suffixes) }}"
-        #hosts: "{{ nb_dns_hosts(vlans={'int', 'ceph', 'ext', 'bmc'}, 
-        #                        vlan_suffixes=nb__dns_vlan_suffixes) }}"
-    #nb_dns__vlan_suffixes:
-    #  external-services: ext.infra.auro.re.
-    #  wifi-access-points: wifi.infra.auro.re.
-    #  monitoring: monit.infra.auro.re.
-    #  routers: rtr.infra.auro.re.
-    #  services-ceph: ceph.infra.auro.re.
-    #  ups: ups.infra.auro.re.
-    #  switchs: sw.infra.auro.re.
-    #  internal-services: int.infra.auro.re.
-    #  bmc: bmc.infra.auro.re.
   roles:
     - knotd
 
diff --git a/playbooks/systemd_link.yml b/playbooks/systemd_link.yml
index a073f0c..dfbf8ee 100755
--- a/playbooks/systemd_link.yml
+++ b/playbooks/systemd_link.yml
@@ -5,6 +5,7 @@
     - edge-2.back.infra.auro.re
     - ssh-1.mgmt.infra.auro.re
     - ssh-2.mgmt.infra.auro.re
+    - vpn-1.back.infra.auro.re
     - dns-1.int.infra.auro.re
     - dns-2.int.infra.auro.re
     - infra-1.back.infra.auro.re
@@ -60,6 +61,13 @@
           mac: 02:00:00:27:ea:9d
         mgmt0:
           mac: 02:00:00:0f:ac:75
+      vpn-1.back.infra.auro.re:
+        adm0:
+          mac: 02:00:00:3b:74:20
+        vpn0:
+          mac: 02:00:00:b5:ca:c7
+        pub0:
+          mac: 02:00:00:e3:65:49
       ssh-2.mgmt.infra.auro.re:
         adm0:
           mac: 04:00:00:98:c2:10