How hard is it to do SNAT out the same interface the packet came in on? If you look at my first question, I want to accomplish that using only one interface. (i.e. one physical network, two logical networks) Thanks, David Ruggles CCNA MCSE (NT) CNA A+ Network Engineer, Safe Data, Inc 910-285-7200 david@safedatausa.com 0100011101101111011001000110110001101111011101100110010101110011011110010110 111101110101