Phil: Please look at RFC 1108, the IP Security Option. This is the format for DoD labels in TCP/IP networks. From this you can see that there is not a simple answer to your question. The number of security labels that might be supported by a single host could be hundreds. Russ