> 3. One SG aborts and becomes responder. How do you know which should > abort? The SG with the lowest IP address? Ben, we also experienced the same problem. Not just in phase2, but in phase1 as well. Just to get things going, we decided to let the one with the higher IP address be the initiator.