There are a few entries in the encap file which are for subnets that are NOT indicated as tunnel-routed subnets. They are apparently in the portal database with the Tunnel attribute UNchecked, but they have a gateway associated with them. Perhaps this is because they at one time *were* tunnel-routed but converted to direct (BGP) routing. Anyway, I believe they should NOT be in the encap file because they are NOT IPIP tunnel-routed. These are 44.48.8.0/22 44.56.128.0/24 44.131.7.0/24 44.182.62.0/24 If any of these are your network, please delete their association with a gateway, or check the Tunnel box. - Brian