Hi, > IIRC, there's a suggestion to do this, but the actual cut-off number > is vendor-specific. ..and i guess this cutoff is reported as an EAP failure and therefore kit configured to block/deny access will mean the eg the 3rd tunnel creation will be the last for some time.... alan