the problem is that we've already gone down the road of defining our own group numbers. IIRC, SSH group 1 is IKE group 2. names such as "rfc3526-modp2048" seem more appropriate and unambiguous for the family of groups defined in that document. - Bill