Description of problem:
If I setup IKE_METHOD=GSSAPI(in interface config 
file /etc/sysconfig/network-scripts/ifcfg-ipsecX) 
then /etc/sysconfig/network-scripts/ifup-ipsec work in right KEYING 
mode(automatic) becose have string
[ -n "$IKE_METHOD" ] && KEYING=automatic
But /etc/sysconfig/network-scripts/ifdown-ipsec work in wrong KEYING 
mode(manual) becose have not such string.

There is small patch(diff -u ifdown-ipsec.orig ifdown-ipsec)
--- ifdown-ipsec.orig   2005-03-29 00:42:23.000000000 +0400
+++ ifdown-ipsec        2006-07-04 13:21:49.000000000 +0400
@@ -32,6 +32,7 @@
   IKE_METHOD=RSA
 fi

+[ -n "$IKE_METHOD" ] && KEYING=automatic
 [ -z "$KEYING" ] && KEYING=manual

 if [ -n "$SRCNET" -o -n "$DSTNET" ]; then