John, Apropos your most recent message, I should have prefeced my comments with the note that I advocate use of native IPsec for transport of IP traffic, not for transport of protocol suites, where there may be a need for real, layer 2 tunneling. Steve