One key issue about VPN-IDs: The VPN-ID itself (RFC 2685) is spec'd only as a format - it may be standards-track but it refers to a 'work in progress' for its architecture and management (presumably the document that later became RFC2764). I.e., some of the assertions about how the VPN-ID is managed appear to be based on an Informational RFC only. Joe