>> [...] support for RFC 2385 [...]
> it's early in the morning for me and the coffee isn't ready yet, so
> my brain isn't willing to help my very much.  can you tell me what
> this does that ipsec doesn't do

Interoperate with existing systems that use 2385 but not IPsec.

/~\ The ASCII				der Mouse
\ / Ribbon Campaign
 X  Against HTML	       mouse@rodents.montreal.qc.ca
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B