On 02/14/2013 08:16 AM, Andrew Miehs wrote: > HOWEVER - on an MPLS network, I would connect the intervrf gateway/ > firewall to a VSS PE. > Am not 100% happy with that, but its better than anything else I have been > able to come up with. Modulo the other thread; we use BGP to the firewall for this ;o)