On 2013/02/11 22:51, David Woodhouse wrote: > $DEITY knows why Cisco haven't updated to the real standard by now Likewise the encapsulation mode attributes for IPsec nat-t, they have been using the ones from the draft forever..