On 23/06/2016 1:47 PM, Cory Smelosky wrote: > Found the actual problem! > > IPSec VTI VPNs means I can't do source-based NAT/firewall rules to redirect GRE from the DECnet tunnel IPs to a separate box as is currently configured. > So, does this mean that you're still off the air? Regards, Tim.