An update. If I leave dpdaction unset (which defaults to none) then the tunnel doesn't timeout with WP 8.1 ->strongswan. This seems to be the best I can do for now, but at least I don't keep getting page not found errors.