Sam, > subnet 192.0.0.0 netmask 255.0.0.0 I know it is not the answer to your question, but you are wrong in your guess that 192.0.0.0/8 is all private IPs. Only 192.168.0.0/16 is. I know that for certain because my own IP starts with 192. If you want a full /8 private, you can only use 10.0.0.0/8 Bets regards, Olivier --