ipsec implementations are sooooo compatible that someone wrote a compiler to deal with the complex and disasterous mess. https://mice.cs.columbia.edu/getTechreport.php?techreportID=1433 ramdu