over IPsec tunnels. I have changed the default to 2 [copy]. I've verified that this works with all my IPSEC setups, and this change has also been discussed in tech-net.