.217 keeps showing up in your ARP table. Have you identified this device?Can you ping it? You need to verify why .1 is not responding to pings.If that device is owned by the ISP, you need to work with them.

You need to contact Cisco TAC and request for a RMA.

If you can't ping from the BVI interface to the local device, it's not a NAT issue.Verify the ATM is working and the BVI interface is up/up.

Per router configuration, it seems you have a very small subnet in the LAN segment.What's the IP address from the device you are trying to ping the server from?If you have other routers, they need to have IP reachability to the 192.168.1.0/24 segment...

It seems your IPSec Tunnel is not up.I noticed your Branch router gets its IP address via DHCP from the ISP.This IP address may change without notice and you have static configuration for your IPSec.Verify the IP address referenced in the configurati...