.217 keeps showing up in your ARP table. Have you identified this device? Can you ping it? You need to verify why .1 is not responding to pings. If that device is owned by the ISP, you need to work with them. ... View more

You need to contact Cisco TAC and request for a RMA. ... View more

If you can't ping from the BVI interface to the local device, it's not a NAT issue. Verify the ATM is working and the BVI interface is up/up. ... View more

Per router configuration, it seems you have a very small subnet in the LAN segment. What's the IP address from the device you are trying to ping the server from? If you have other routers, they need to have IP reachability to the 192.168.1.0/24 segment Also, this router needs to have IP reachability to theirs. Regards, ... View more

It seems your IPSec Tunnel is not up. I noticed your Branch router gets its IP address via DHCP from the ISP. This IP address may change without notice and you have static configuration for your IPSec. Verify the IP address referenced in the configuration matches the IP address from Dialer0. Regards, ... View more

So you are trying to access the internal IP address via the VPN or via an internal host? If so, it could be an issue of allowing that communication via the VPN. Check the VPN ACL and make sure this flow matches. ... View more

No configuration is required. Verify the internal interface configuration for ACL preventing access and/or IP subnet configuration. ... View more

For DC WAN Edge, a 2951 may be too slow and CPU may be impacted with high BGP table + throughput demands. I recommend going with an ASR. ... View more

Yes. ... View more

You need to configure WCCP inbound on Router A with the interesting traffic ACL and make sure to have the ironport configured for L3 return. This book covers some of this detail http://tinyurl.com/mngykqx ... View more

70mins may not be enough if ISP B is not a 'tier 1' provider. A non-tier 1 provider will rely on tier 1 providers for subnet propagation. As long as you own the ASN, changing it shouldn't be a problem. ... View more

Leo, I respect your opinion and I'm sorry you feel this way. ... View more

John, http://www.cisco.com/web/services/portfolio/optimization/network-optimization-nos/index.html ... View more

Leo, the upgrade process isn't time consuming. What is time consuming is the politics involved for any upgrade in today's network. That's the reason the Network Optimization Team made that comment. You are a lucky person to have that kind of liberty - upgrade the entire network without filing a ton of paperwork. As for the use of NOS, they/we don't just provide IOS recommendations. There are more services such as: Design Assistance/Review, Software Recommendation, Field Notice/PSIRT advisories, Protocol/Technology Audits, HW End-Of-Life review/report and more. Be sure to make use of them. ... View more