This is a great write up by Stephen Friedl about the IPSec suite of protocols. Highly recommend reading it.
On a side note, I finally updated the Blogging software on the site. Have been getting a lot of “blogspam” from the entries on this site. It is just amazing how far the spammers go to NOT get their message :).