Thanks! I've enabled all the logged as suggested. All looks ok, apart from the line about XAuth failed?
May 16 14:26:35 :124003: <INFO> |authmgr| Authentication result=AAA server timeout(2), method=VPN, server=Guest_Auth, user=172.25.254.106
May 16 14:26:35 :124004: <DBUG> |authmgr| Auth server 'Guest_Auth' response=2
May 16 14:26:35 :124014: <NOTI> |authmgr| Taking Server Guest_Auth out of service for 10 mins
May 16 14:26:35 :124004: <DBUG> |authmgr| Select server for method=VPN, user=FarehamRAP1, essid=<>, server-group=default, last_srv Guest_Auth
May 16 14:26:35 :124038: <INFO> |authmgr| Selected server <> for method=VPN; user=FarehamRAP1, essid=<>, domain=<>, server-group=default
May 16 14:26:35 :124544: <DBUG> |authmgr| Timed Out to N/A.
May 16 14:26:35 :124541: <DBUG> |authmgr| Bring all servers in server group default back in service.
May 16 14:26:35 :124015: <NOTI> |authmgr| Bringing Server Guest_Auth back in service.
May 16 14:26:35 :124097: <DBUG> |authmgr| Setting authserver 'Guest_Auth' for user 172.25.254.106, client VPN.
May 16 14:26:35 :124004: <DBUG> |authmgr| ncfg_get_max_auth_failures vpnflags:0 VPN profile maxfailures:0
May 16 14:26:35 :124447: <DBUG> |authmgr| auth_vpn_resp_raw: user name FarehamRAP1, check_vpn_cp_single_session ret -1
May 16 14:26:35 :124441: <DBUG> |authmgr| auth_vpn_resp_raw: vpnflags:1
May 16 14:26:35 :103048: <ERRS> |ike| IKE XAuth failed for FarehamRAP1
May 16 14:26:37 :124004: <DBUG> |authmgr| RX (sock) message of type 98, len 1016
May 16 14:26:37 :124441: <DBUG> |authmgr| auth_vpn_raw: vpnflags:1
May 16 14:26:37 :124100: <DBUG> |authmgr| Setting auth subtype 'PAP' for user 172.25.254.106, client VPN.
May 16 14:26:37 :124099: <DBUG> |authmgr| Setting auth type 'VPN' for user 172.25.254.106, client VPN.
May 16 14:26:37 :124098: <DBUG> |authmgr| Setting authstate 'started' for user 172.25.254.106, client VPN.
May 16 14:26:37 :124546: <DBUG> |authmgr| aal_authenticate user:FarehamRAP1 vpnflags:1.
May 16 14:26:37 :124004: <DBUG> |authmgr| ncfg_auth_server_group_authtype ip=172.25.254.106, method=VPN vpnflags:1
May 16 14:26:37 :124004: <DBUG> |authmgr| ncfg_auth_server_group_authtype vpnflags:1 vpn-profile:default-rap
May 16 14:26:37 :124004: <DBUG> |authmgr| ip=172.25.254.106, sg=default
May 16 14:26:37 :124547: <DBUG> |authmgr| aal_authenticate server_group:default.
May 16 14:26:37 :124004: <DBUG> |authmgr| ncfg_auth_server_group_authtype ip=172.25.254.106, method=VPN vpnflags:1
May 16 14:26:37 :124004: <DBUG> |authmgr| ncfg_auth_server_group_authtype vpnflags:1 vpn-profile:default-rap
May 16 14:26:37 :124004: <DBUG> |authmgr| ip=172.25.254.106, sg=default
May 16 14:26:37 :124004: <DBUG> |authmgr| Select server for method=VPN, user=FarehamRAP1, essid=<>, server-group=default, last_srv <>
May 16 14:26:37 :124004: <DBUG> |authmgr| server=Guest_Auth, ena=1, ins=1 (1)
May 16 14:26:37 :124038: <INFO> |authmgr| Selected server Guest_Auth for method=VPN; user=FarehamRAP1, essid=<>, domain=<>, server-group=default