I have a L2TP/IKEv1 RA VPN configured on a ASA 5516. It uses AAA for user authentication. It works perfectly for the first 3 users that concurrently connect to it. No other additional users can connect. The AAA system connects to a Duo MFA setup and the users get prompted on their phones when they try to connect. I can see in the Duo admin panel that access is granted but on the user's computer they just get "The connection was closed by the remote computer." If one of the first 3 users logs off then someone else is allowed to connect.
I've increased the simultaneous logins setting from 3 to 30. This has had no effect. I was under the impression that this was for a single user anyway but figured I'd give it a shot. I'm about out of ideas so any help would be appreciated.