Problems? Maybe this will help
My issue: After a disconnect or timeout, a SAD entry would sit pretty. After a lot of playing around eventually I could no longer connect getting Phase 1 failed due to timeout or something similar. No matter what I did, I couldn't connect back. Restarting racoon and the firewall didn't work :-(. Came across this thread:
Which then motivated me to switch "My Identifier" from "My Ip address" to "Dynamic DNS" and now I'm connected.
This so far has seemed to have fixed my issue with sticky SAD entries. Will follow up tomorrow and see if it's a definite fix.