A hard reset after changes to the vpn policies seem to get it going fine. Soft reboots and on-the-fly changes cause unexplained instabilities on devices where the policy changed. That’s on firmware 3.201.