diff --git a/en_US.ISO8859-1/books/handbook/security/chapter.sgml b/en_US.ISO8859-1/books/handbook/security/chapter.sgml
index a5d208f2b3..06cb834207 100644
--- a/en_US.ISO8859-1/books/handbook/security/chapter.sgml
+++ b/en_US.ISO8859-1/books/handbook/security/chapter.sgml
@@ -3060,13 +3060,15 @@ options   IPSEC_DEBUG  #debug for IP security
         role="ipaddr">192.168.1.x</hostid>), then one of the networks will
         have to be renumbered.</para>
  
-      <para>I think it's now a law that every VPN article must feature
-        some ASCII artwork.  This one is no exception.</para>
- 
       <para>The network topology might look something like this:</para>
  
-      <screen>
-Network #1            [ Internal Hosts ]    Private Net, 192.168.1.2-254
+      <mediaobject>
+	<imageobject>
+	  <imagedata fileref="security/ipsec-network" align="center">
+	</imageobject>
+
+	<textobject>
+<literallayout class="monospaced">Network #1            [ Internal Hosts ]    Private Net, 192.168.1.2-254
                       [   Win9x/NT/2K  ]
                       [      Unix      ]
                                |
@@ -3086,8 +3088,9 @@ Network #1            [ Internal Hosts ]    Private Net, 192.168.1.2-254
                                |
 Network #2            [ Internal Hosts ]
                       [   Win9x/NT/2K  ]    Private Net, 192.168.2.2-254
-                      [      Unix      ]
-      </screen>
+                      [      Unix      ]</literallayout>
+	</textobject>
+      </mediaobject>
  
       <para>Notice the two public IP addresses.  I'll use the letters to
         refer to them in the rest of this article.  Anywhere you see those