Add a transport mode specifier to ike rules. Tunnel mode remains the default.
"looks right" hshoexer@