Oh, btw, since I brought up asr901 (off topic in this thread, please forgive) if anyone knows how to perform per-flow-point (per service instance) policing by matching on vlan id rcv'd from customer , please advise on how to config... Aaron