Brian, I think the best way to approach it is to just try this: interface Tunnel1 no ip address decnet cost 10 bridge-group 1 Sometimes the simplest approach is best. =) Offhand I don't see why that wouldn't work. Another possibility might be to to just bridge everything across the tunnel, then use ACLs to filter on EtherType (DECnet Phase IV is 0x6003): access-list 200 permit 0x6003 ... interface Tunnel1 no ip address bridge-group 1 input-type-list 200 # or output-type-list?www -Dave -- Dave McGuire, AK4HZ New Kensington, PA