Security Model with Tunnel-mode IPsec for NAT Domains
RFC 2709

Approval announcement
Draft of message to be sent after approval: