In your previous mail you wrote: Right. Perhaps a distinction should be draw between subsequent exchanges (eg, main/quick). It's probably not a hardship to say the IP address must stay stable during an exchange; what we don't want is to have to renegotiate a new main mode SA if the IP address changes. => I agree at 100%! Thanks Francis.Dupont@enst-bretagne.fr