Hi Mike, > Is this a client software limitation? Yes, Microsoft's built-in IKEv2 client does not support RFC 4739 that defines multiple authentication exchanges. Regards, Tobias