The work on the data model for PIBs and MIBs has resulted in defining a greater level of detail about what it means to configure an IPsec device. It would be impossible to do the work without coming across these issues. However, this remains entirely consistent with RFC2401. Hilarie