Hi, > Packet-Src-Ip-Address is one way. Or set huntgroups for your own > NASes (NAS-IP-Address, etc), then just check for membership of the > huntgroup. NAS-IP-Address - dangerous....its something that can clash with remote sites - as its local specific - and therefore the IP addresses used might be the same. alan