IPSec on-demand VPN

[Flyshuffle]

Hi Everyone,

I would like to create an an IPSec dial-up VPN for iOS devices. I would like to use the built-in VPN client in iOS and be able to connect on-demand, using certificate authentication. I can create a "dial-up - iOS (Native)" VPN simple enough with the wizard, but have been fumbling around getting the on-demand portion to work as expected. Has anyone successfully deployed this or a similar scenario? My end goal is to retire our current Pulse Secure VPN appliance and collapse all VPN services into the Fortigate, but seem to have hit a road block here.

Thanks in advance!