If a user is running sasyncd, start isakmpd with -S. In this mode isakmpd starts off passsive and doesn't delete SA's on shutdown. OK ho@, hshoexer@, deraadt@