[strongSwan] Using certificate-only authentication for iOS devices?

[Michael Durket]

According to the Apple Enterprise Deployment Guide, you can distribute an IPSec VPN profile to an iOS device with Xauth authentication set to '0' which would imply that you can have a connection authenticated only by a client certificate. Does anyone out there use this with Strongswan or know if it even works (some discussions on Apple's forums indicate that even though Apple claims you can turn off Xauth it in fact doesn't work).