Hi Pascal, OK, I think I got it now :-) For each session the destination IP address is kept as part of the session identifier key as well ? So, for my example, there are 2 unique entries in the NAT table, without the need for UDP src port change. However, if 2.1.1.1 will send a packet to 10.0.0.2, a 3rd entry will be created, this time with the src UDP 4500 changed to some "new-port" in order to distinguish from the 2nd entry (in which destination address is same 10.0.0.2) ? While the 2nd entry will continue to handle packets 10.0.0.2/4500->10.0.0.101/4500, the 3rd entry will handle packets 10.0.0.2/4500->10.0.0.101/"new-port". Am I right ? Many thanks for the support and patience ! Guy ��.n��������+%������w��{.n����z���)��jg��������ݢj����G�������j:+v���w�m������w�������h�����٥