Hi, does it have technical reasons that the setting ipsec-interface=0 disables xfrmi, instead of generating a ipsec0 device, or was it a design decision, because of the hybrid value yes, no, number? Wolfgang