On 2013-01-20, at 9:05 PM, "John H. Reinhardt" <johnhreinhardt at yahoo.com> wrote: I'm also playing with the virtual Cisco, but I'm unsure where to place it in my network. A simplistic diagram is here http://s295.beta.photobucket.com/user/reinhardtjh/media/DataCenter/Network_… It depends on where in your network you want to put your VAXen. In your diagram, are your VAXen plugged in to the "Local LAN network" ? If so, put your virtual router in this network, and give it a fixed IP address for that subnet. Your virtual router will act as a "router on a stick" - meaning it's got one physical interface. Tunnel traffic will come in via port forwarding from your Vyatta. The virtual router will un-encapsulate the traffic, and route the DECnet traffic back out the same physical interface, where your VAX machines will see it. Your Vyatta will need to be configured to route GRE traffic (which is the packet type for the tunnel) to your virtual router. Ian