Some time ago we agreed to simplify the selector types and removed some options, to make the SPD selectors align with the IKE payload ID types. That's why we limit the address choices, in part. In IPSecond it may be possible to remove some of these restrictions, if corresponding changes to IKE are made. Steve