Hi All, suppose a VPN gateway encrypts a packet and the next hop to the tunnel (endpoint) is unreachable. What should be done? Should the packet be dropped (without generating an ICMP host/net unreachable?). Any pointers? sabrina