Hi, It looks like that if IKE_SA (local) address is changed, the IKE_SAs are properly migrated to use the new address. Also the CHILD_SAs are moved over. But it appears that the traffic selectors and corresponding SPDs for the CHILD_SAs are not updated anywhere. Or did I misread something? Thanks, Timo