> When will this be finally default? > (along with "no ip redirects"). At least _global_ options for that. Check out "AutoSecure" config in 12.3 - it does that! http://www.cisco.com/en/US/customer/products/sw/iosswrel/ps5187/products_feature_guide09186a008017d101.html#wp1027129 Mike