"Bob" == Bob Proulx <bob@proulx.com> writes: Bob> Firewalls especially those running NAT will implement timers Bob> that if they do not see traffic from the internal interface Bob> within their timeout limit will clear the route from their Bob> tables. A keepalive is needed in that case to keep the Bob> firewall nat table entry active. Yup. I should've figured you meant this.... Thanks, Shyamal