In message <19990320182508.A606@long-haul.net>, you write: >a pointer on pfkeyv2 was exactly what i was asking for. Ah, ok. That wasn't clear. More info can be found at: ftp://ftp.isi.edu/in-notes/rfc2367.txt While many parts will be mostly only interesting for developers, some of the scenarios might be useful for an end-user IPsec configuration guide. -Craig