When configuring a tunnel in the MacOS client, there's an option called "On-Demand". If Ethernet and/or Wi-Fi are checked, the client will auto-connect the tunnel.

It's a great feature, but the term "On-Demand" is misleading. I would suggest "Auto-Connect" or "Auto-Establish" instead.