1. Why is the Trunk interface showing it is DTP Enabled, when it is clearly set to NONEGOTIATE in the TAS (Trunking Admin Status)?R: Maybe it's about timing:Dynamic Trunk timeout is 300 secondsYou must issue the command after 5 min.2. Why would the A...

if let's say instead inspect we add an icmp acl and group that acl on interface outside inwe let icmp two flow from lower level to higher levele

class-map inspection_defaultmatch default-inspection-traffichere you label the traffic(ftp, dns, tftp and so on) as "inspection_default"after this with policy-map you tel what to do with that trafficguess what inspectif you look at in policy-map insp...