Paul: >> This is what IKE v2 and a cert profile should do, in combination. > >Given the importance of certificates to IKEv2, the profile should be a >part of the IKEv2 document. Why do you think it needs to be one document? I think maintenance would be easier if it was a separate document. Russ