hi "It's a accept reply without the service-type." - yep, you gleaned that bit. now, why you dont see the service-type? probably because that is being put into the inner-tunnel and you have to expose it to the outer tunnel reply - see examples in the configs alan