On 02/09/2013 05:32 AM, Andrew Miehs wrote: > Don't run dynamic routing protocols with firewalls. That's one option. The other is to buy firewalls from vendors who can implement it properly. Ours do dynamic routing fine.