>Hi Hilmar,
>
>I finally got stuck in with the debugger attached. I *think* I've helped things by denying the eigrp and rip stuff.

RIP sends updates every 30 seconds (default). I don't remember the exact interval (default) for EIGRP - updates are only sent if a change is detected, but EIGRP neesneeds to send keep-alive packages (to notify that a route is still available).

You may or may not need the routing protocols (RIP or EIGRP). If you have a single router with a single route to the outside world, a static route is preferable, precisely because the regular updates are not necessary.

>I took the timeout down to a minute for testing so I won't feel safe until I take it back up to a more practical 3-5 minutes and test that. Only annoyance I have now is that I can't seem to get cdp (Cisco Discovery Protocol?) disabled - the relevant commands (no cdp enable ? ) just don't seem to have any effect. Anyway there IS progress. Thanks again,

If I remember correctly, CDP ENABLE will enable CDP on an individual interface. Pressumably, if you precede it with NO, you will disable it.

There is also a command to enable or disable CDP globally, that is, in the "configure terminal" mode. I don't remember the command, but I think you should find it if you type "CDP ?".