diff --git a/apps/rego-tunnel/config.json b/apps/rego-tunnel/config.json
index 6a434a6..dbe598a 100755
--- a/apps/rego-tunnel/config.json
+++ b/apps/rego-tunnel/config.json
@@ -5,18 +5,18 @@
   "exposable": true,
   "dynamic_config": true,
   "id": "rego-tunnel",
-  "description": "Cisco Secure Client VPN in Docker with noVNC web UI for accessing Rego environments. No VM overhead.",
-  "tipi_version": 5,
+  "description": "Cisco Secure Client VPN in Docker with noVNC web UI for accessing Rego environments. Native Docker - no VM overhead.",
+  "tipi_version": 6,
   "version": "5.1.14.145",
   "categories": ["utilities"],
-  "short_desc": "Cisco VPN tunnel to Rego environments (native Docker, no VM)",
+  "short_desc": "Cisco VPN tunnel to Rego environments (native Docker)",
   "author": "alexz",
   "source": "https://git.alexzaw.dev/alexz/runtipi",
   "form_fields": [
     {
       "type": "email",
       "label": "VPN Email",
-      "hint": "Email address for VPN SSO login",
+      "hint": "Email address for VPN SSO login (configured in /shared/cisco-vpn script)",
       "placeholder": "your-email@company.com",
       "required": false,
       "env_variable": "VPN_EMAIL",
@@ -25,7 +25,7 @@
     {
       "type": "password",
       "label": "VPN Password",
-      "hint": "Password for VPN SSO login. Leave empty for manual login via noVNC.",
+      "hint": "Password for VPN SSO login (configured in /shared/cisco-vpn script)",
       "placeholder": "",
       "required": false,
       "env_variable": "VPN_PASSWORD",
@@ -34,7 +34,7 @@
     {
       "type": "text",
       "label": "TOTP Secret",
-      "hint": "Base32 encoded TOTP secret for 2FA (from authenticator app setup). Leave empty if not using TOTP.",
+      "hint": "Base32 TOTP secret for 2FA (configured in /shared/cisco-vpn script)",
       "placeholder": "",
       "required": false,
       "env_variable": "VPN_TOTP_SECRET",
@@ -43,19 +43,20 @@
     {
       "type": "text",
       "label": "VPN Host",
-      "hint": "VPN server hostname (for reference)",
+      "hint": "VPN server hostname",
       "placeholder": "vpn.company.com",
       "required": false,
       "env_variable": "VPN_HOST",
-      "default": ""
+      "default": "vpn-ord1.dovercorp.com"
     },
     {
-      "type": "boolean",
-      "label": "Auto-Connect on Start",
-      "hint": "Automatically connect to VPN when container starts (requires credentials above)",
+      "type": "text",
+      "label": "Target IP",
+      "hint": "IP address to route through VPN (e.g., IBM i server)",
+      "placeholder": "10.35.33.230",
       "required": false,
-      "env_variable": "VPN_AUTO_CONNECT",
-      "default": false
+      "env_variable": "TARGET_IP",
+      "default": "10.35.33.230"
     },
     {
       "type": "password",
diff --git a/apps/rego-tunnel/shared/cisco-vpn b/apps/rego-tunnel/shared/cisco-vpn
old mode 100644
new mode 100755