Sorry I've not gotten back here. I've not made progress in getting it to work, but what JM42 says seems to be the issue. I have made progress as far as knowing that, yes, I need to pass broadcast traffic into the pipe. The address pool isn't currently in the same subnet, but I plan to do that...