If an Anycast utilizes a Unicast address, how would a client system know to treat it any differently than a Unicast (i.e., use a Mutilcast group key management server instead of ISAKMP). For Multicast addresses, the address type is clearly an indicator. For Anycast, is it presumed that the security policy must identitify it as such? John Irish