Hi Asking the list again, sorry my google skill on archive search is letting me down. So a quick recap ccr1036 & ccr1072 I have Interface Xfer - bridge port onto eth1, this was the interface is also up , 192.168.1.1/24 Management - vlan 8 Vendor - vlan 7 Internet - vlan 6 My default routing table is 192.168.1.0/24 Xfer Dgw 192.168.1.2 My internet I have vrf internet and I use BGP with routing tag internet Same for vendor and same for management So management routing table is basically Local attached network 10.10.10.80/24 Dgw 10.10.10.1 I have the appropriate ip route vrf and ip route rule lines and I also have mangle lines that mark inbound packets and re applies marking on the outbound packets What happens is any ICMP generate locally ... host / net unreachable are generated with src address 192.168.1.1 not the right src address for the vrf. I have tried snat lines basically saying if src address = 192.168.1.1 and out interface = management then change to the 10.10.10.80 << this doesn't work. I seem to remember somebody saying they had fixed this some how? If so can you please repost. I have chatted with support... basically they say yes bug, will not be fixed until V7 .. maybe next century ... Any one know of any work arounds ? Thanks Alex