Are there any restriction on the Identification Types of the IDci and IDcr? In other words, can client-initiator in Phase 2 send IDcr as a RANGE, SUBNET, FQDN, etc? I couldn't find any such restrictions in the draft-standards. Slava Kavsan IRE