Hi, Many people are talking about using crypto as a matter of routine. It would be really nice for IPSEC to be available in our kernels by default as on Linux. It may be important enough even if it means diverging from upstream or if there is some overhead in doing so. The basic functionality seems to work with the ipsec-tools package, except for a problem enabling NAT-T (Bug #718224). Regards, -- Steven Chamberlain steven@pyro.eu.org