>> Something one needs to be very careful about when doing EIGRP routing >> via a GRE (or IPSEC or whatever) tunnel through the firewall > I'd be pretty careful about BGP as well. in general, this is pretty sicko stuff. in the long run, having a control plane that is not congruous with the data plane is a recipe for problems, and ones that are very hard to debug. randy