>> in order to decrypt the traffic one would need to print Cisco configs Which could be done legally via 'Cisco Service Independent Intercept (SII)' built into

>> in order to decrypt the traffic one would need to print Cisco configs Which could be done legally via 'Cisco Service Independent Intercept (SII)' built into IOS to comply with CALEA (Communications Assistance for Law Enforcement Act). And not so legally via user-escalation exploits within the same service. Anyway, props for making the effort. I too am interested in your key exchange methods.