Addendum: If not obvious. There are two separate instances of ‘conndscp’, one on the egress path (in ‘both’ mode) and one on the ingress path (in ’set’ mode) Cheers, Kevin D-B gpg: 012C ACB2 28C6 C53E 9775 9123 B3A2 389B 9DE2 334A