Can some provide me documentation on splitting a class C network. I can't think of any good reason other than saving IPs but when your part of an organization that has an entire class B (10.29.0.0/16) that isn't a good enough reason for me. I know at...

It was recommended by a cisco reseller to failover the supervisor modules every so often to ensure redundancy but i can't find the documentation that supports this nor anyone else doing it.

When igmp snooping is applied the interface that sends multicast packets out the job fails after a few minutes. If IGMP is turned off the job passes but multicast hammers the entire network so i need it working. Any suggestions.

Can access lists be hacked? If should be put in place in the event they got hacked? Is there additional security on the router or is a FW appliance needed?

I have access list on my WAN ports that build tunnels over the internet. I want to apply even more security to those ports with out install a FW appliance. Any ideas would be great.