As should surprise nobody, I strongly support the use of DHCP over IKE instead of the config payload approach for a number of reasons. Among other things it coexists better with existing non-IPsec network infrastructure and provides a better future expansion/extension path, and avoids a bunch of redundant standardization work. - Bill