IRE roaming with certificates failing:

Remote Party Identity and Addressing

Type: IP Subnet
Subnet: Internal Concentrator Subnet, ie 10.10.10.0
Mask: Internal Concentrator Netmask, ie 255.255.255.0
Port: All  Protocol: All

[X] Connect using Secure Gateway Tunnel

ID Type: Domain Name
         server.domain.name
IP Address: SERVER IP ADDRESS

[MY IDENTITY]


Shared Secret: <your secret here>
ID Type: IP Address
         Your IP Here

Internet Interface
   Name: Any
   IP Addr: Any

[SECURITY POLICY]

IKE Phase 1 Negotiation Mode: Main Mode

[X] EnablePerfect Forward Secrecy (PFS)
PFS Key Group: Diffie-Hellman Group 2
[X] Enable Replay Detection

[AUTHENTICATION]

Authentication Method: Shared Secrets

Encryption and Data Integrity Algorithms
Encrypt Algorithm: Triple DES
Hash Alg: SHA-1
SA Life: Seconds, 3600

Key Group: Diffie-Hellman Group 2

[KEY EXCHANGE]

Protocols

SA Life: Unspecified
Compression: none

ESP:
  Encryption: triple DES
  HASH: SHA-1
  Encapsulation: Tunnel

No AH