So i gave up with the IKEv2 and used IPSec + XAuth due to constant drop outs. I`m using the Shrew Soft VPN which means users can authenticate with the AD and it is fast and stable. Have had users online all day with zero drop outs, this is includes Wi-Fi. Only issue is the username doesn`t appear in the VPN list like it did with the LT2P over IPSec.

Hope this helps.

Thanks for letting me know! Interesting that you were experiencing the dropouts too. I will try a few users with IPsec/XAuth and see if this makes a difference!

I used the Shrew Soft VPN with 86400 for the phase1 and 28800 for the phase2 key lifetimes. I also added a route otherwise all traffic went through the VPN.

Hope this helps.