correction on my previous mail regarding queries for "RFC 2401: Authentication Header", which is in fact RFC 2402. My queries are related to "RFC 2402: Authentication Header". Afzal