> Doing the keepalives in phase one between the peers is much cleaner. I also believe that any keepalive function should be deemed an attribute of the IKE association and not done as a Phase 2 exchange. Derrell