A wireless virtual private network (VPN) connection may be automatically instantiated from a wireless VPN client device using a VPN instantiation server. The VPN client device may automatically connect to the VPN instantiation server to obtain client configuration information for a VPN connection to a VPN endpoint server. The VPN instantiation server may instantiate the VPN endpoint server using a network function virtualization (NFV) platform. Then, the VPN client may establish a layer 2 tunnel across a wireless network to the VPN endpoint server.