Here's our situation. Two hosts, s1, s2, each with its own key. Domain name foo is aliased to either s1 or s2 (each with its own fixed IP address), depending on which is working correctly at any given time. The known_hosts(5) man page, when it comes into existence, should explain how I would express that the ip-address/key pair from either s1 or s2 is acceptable when connecting to foo. I can't find any documentation that suggests if this is possible or if so, how to do it. Thanks Dave Ref: http://openssh.org/manual.html