All, In case people are interested, I have tested a load of stuff as working on 12.2(33)SXI. http://cisco.cluepon.net/index.php/Ios_sxi Basically, the only thing I've found that *doesn't* work as expected is DHCP relay inside a VRF - it appears to get the next-hop lookup wrong. I've opened a TAC case for the issue.