Chinna, Say I have an imaginary implementation that has two tables: 1) Pre-shared Keys table searched by source-ip-address 2) Phase 2 Policy Table searched by ID (which could be of all types: FQDN, USER_FQDN, IP Address, etc) What problem do you see in using Table #1 to select pre-shared keys and using Table #2 to select Phase 2 Policy based on ID Payload?