I think DHCP server on non-default VR is supported on v.11.1. I had similar problems before where I can redesign my VRs so that the DHCP server can live inside inet0 and it works fine. But now v.11.1 also supports IKE service running on non-default VR too. Lawrence