@Richard Burts wrote: 2) I do not understand the question. My suggestions included a static route on CE1 more specific than the connected /24. Have you done that? Are you saying that does not work? When the 22.200 under the CE1 come back, it can't ping to the gateway. This is the routing table on CE1: I tried to 'clear ip ospf process' on CE2, the 22.200 under the CE1 can ping to the gateway. How should I do?   Thank you very much. ... View more

This is current configuration: CE1# track 1 ip sla 11 reachability  delay down 10 up 1 ! ip route 172.16.22.128 255.255.255.128 FastEthernet0/1.22 track 1 ! ip sla 11  icmp-echo 172.16.22.200 source-ip 172.16.22.254  frequency 10 ip sla schedule 11 life forever start-time now CE2# interface GigabitEthernet0/1 ip address 10.10.10.3 255.255.255.248 ip access-group Block_echo_22.254 in ! ip access-list extended Block_echo_22.254 deny icmp host 172.16.22.254 host 172.16.22.200 echo permit ip any any I found the 2 issues: Should we block the ICMP Echo like the CE2 configuration above to prevent IP SLA reachability from CE1 when server under CE1 down? When the server under CE1 come back, the CE1 still see the route from CE2 because it is the longest match (/25) than the connected (/24), how should I do? Thank you very much. ... View more

@Karsten Iwen wrote: do a conditional announcement on the primary site while the server is reachable. Could you please share how to do?   Thank you very much. ... View more

The x.100.1.202 can't ping & rdp to x.223.40.155. However, x.100.1.202 can ping & rdp to x.100.1.204 and external (another public subnet) also can ping & rdp to x.223.40.155 normally.   Thank you very much. ... View more

How should I do?   Thank you very much. ... View more

The configuration in the topic and I also attach of the whole router. The x.100.1.202 can't ping & rdp to x.223.40.155. How should I do? # sho ip nat nvi tra icmp Pro Source global Source local Destin local Destin global icmp x.170.119.58:39556 x.170.119.58:39556 x.223.40.155:39556 x.100.1.204:39556 icmp x.170.119.58:44676 x.170.119.58:44676 x.223.40.154:44676 x.100.1.202:44676 icmp x.223.40.154:1 x.100.1.202:1 x.223.40.155:1 x.100.1.204:1 Thank you very much. ... View more

My configuration now looks like: interface GigabitEthernet0/0 description External ip address x.223.40.119 255.255.255.0 ip nat outside duplex auto speed auto ! interface GigabitEthernet0/1 description Internal ip address x.100.1.253 255.255.255.0 ip nat inside duplex auto speed auto ! ip nat inside source static x.100.1.202 x.223.40.154 ip nat inside source static x.100.1.204 x.223.40.155 The x.100.1.202 can ping but can't rdp to x.223.40.155. I tried to add more 2 commands: ip nat outside source static x.223.40.154 x.100.1.202 ip nat outside source static x.223.40.155 x.100.1.204 The x.100.1.202 can't ping & rdp to x.223.40.155. How should I do?   Thank you very much. ... View more

Did you find the root cause?   Thank you very much. ... View more