How the mode (tunnel/transport) is specified by IKE to the IPSec Kernel, the PF_Key messages does not include directly this piece of information. If it's thanks to address-extension, what's the type of this extension ? Thanks Regards Yves