One of the reasons for having ordered SPDs is interoperability. If you have overlapping SPDs and they are in different orders on both sides of the VPN link, then you may run into connectivity problems. To correct a problem of this sort, one of the sides will need to change the order of their SPDs. -dave