what ip's are getting challenged? Also you can try them at the cli with the acl command to test. /b On Jul 12, 2008, at 8:44 AM, Ivan C Myrvold wrote: > Yes, of course, else it would not have worked at all. > My point is, it looks like that only some of the IP addresses in the > range work, for some reason. > > Ivan