> That's what 'normal IOS' does by default, unless you have 'no ip unreach' > configured on the ingress interface :-) Thanks Gert. What are the downsides of running "ip unreachable"? It was always presented to me as a bad thing... Vincent