Honestly after having meraki (Cisco) on the support over a few days we have up on getting the our MX to reliably serve as a VPN host.
We switched to softether (https://www.softether.org). And had it setup and fully functional in about 30 mins (after never setting it up before). And it's been great!