For the time being, yes (largely because I need to
sleep now before looking at this further!)
 Sent from my iPhone
  On Jun 22, 2016, at 22:56, Tim Sneddon <tim at
sneddon.id.au> wrote:
  On 23/06/2016 1:47 PM, Cory Smelosky wrote:
 Found the actual problem!
 IPSec VTI VPNs means I can't do source-based NAT/firewall rules to redirect GRE from
the DECnet tunnel IPs to a separate box as is currently configured.
 
 So, does this mean that you're still off the air?
 Regards, Tim.