Dan, >I have NEVER understood why people are so anal about tunnel vs. transport. >One is a case of the other, IMHO. Transport and tunnel mode require different processing for the external (outer) headers and differenbt processing upon receipt, e.g., which header is checked agaianst the selectors. Steve