I'd like put the boxes that need to proxy arp off the 209net... that is max1, max2, max3, cust-gateway for the for max port description et.1.1 c3640 port description et.1.2 HPswitch port description et.1.3 cust-gateway port description et.1.4 tunez port description et.1.5 max1 port description et.1.6 max2 port description et.1.7 agis-1 port description et.1.8 port description et.2.1 CompPhone port description et.2.2 cle1 port description et.2.3 cle3nt port description et.2.4 cle4nt2k port description et.2.5 cle4-fb1 port description et.2.6 mail2 port description et.2.7 a.dns port description et.2.8 rob vlan add ports et.1.(1-8) to 209.115.29.254/24 vlan add ports et.1.(3-4) to 216.29.171.1/24 vlan add ports et.1.(5-6) to 216.28.152.1/24 vlan add ports et.2.(1-4) to 216.29.153.1/24 vlan add ports et.2.4 to 216.28.20.1/24 vlan add ports et.2.5 to 216.28.21.1/24 vlan add ports et.2.6 to 66.132.4.1/23 vlan add ports et.2.7 to 207.170.128.1/27 vlan add ports et.2.8 to 206.170.160.1/24 00e01e3e22d3 209.115.29.8 50 cust-gateway 00e01e3e22d3 216.29.171.147 53 00a0c9c53a97 216.29.171.225 43 tunez 00a0c9c53a97 209.115.29.201 26 00c07b70a02a 209.115.29.223 50 castalloy 00c07b70a02a 209.115.29.60 38 local436 00c07b70a02a 209.115.29.10 38 max1 00c07b70a02a 216.28.152.163 10 00c07b7c5c8a 207.170.139.144 50 00c07b7c5c8a 207.170.139.159 50 00c07b7c5c8a 216.28.152.191 28 00c07b7c5c8a 216.28.152.50 171 00c07b7c5c8a 209.115.29.239 41 00c07b7c5c8a 209.115.29.9 0 max2 00000cfd7501 207.170.163.0 194 00000cfd7501 207.170.163.255 238 00000cfd7501 209.115.29.11 201 agis-1 001036000afa 216.29.153.8 53 CompPhone 216.29.153.156 sql 00a0c99512ef 216.29.153.2 8 cle1 00a0c99512ef 216.29.153.214 20 cle1 00d0b7859855 216.29.153.254 20 cle3nt 00d0b7859855 216.29.153.39 20 cle3nt 0002b35f3fe8 216.28.20.2 0 cle4nt2k 0002b35f3fe8 216.28.20.254 47 0002b35f3fe8 216.29.153.153 15 <- remove 0002b35f4ce1 216.28.21.120 39 cle4-fb1 0002b35f4ce1 216.28.21.2 50 00e081501c10 66.132.4.2 70 mail2 00e081501c10 66.132.4.255 48 00e081501c10 66.132.5.0 41 00e081501c10 66.132.5.254 46 --- easy 0002b333c532 209.115.29.42 3 000625a1890f 209.115.29.4 101 000bdb9049a1 209.115.29.54 8 000c7608fac8 209.115.29.55 3 001083397f00 209.115.29.100 1 00301e04e247 209.115.29.5 0 00a0cc2ca1ce 209.115.29.52 3 00e0bb00c55b 209.115.29.45 8 02bfd1731d9d 209.115.29.157 3 08000977011f 209.115.29.116 7 080009ca2b82 209.115.29.104 7 00c07b7d95e0 209.115.29.3 8 00d0b71b1d4b 209.115.29.33 39 00902750ace5 209.115.29.174 37 00902750ace5 209.115.29.2 9 00a0245157e7 209.115.29.81 37 00a0245157e7 209.115.29.98 50 agis-1 11 207.170.129.32/28 207.170.138.128/25 207.170.139.160/28 207.170.141.96/27 207.170.163.0/24 max2 9 207.170.139.32/29 207.170.139.64/28 207.170.139.96/28 cust-gateway 8 216.29.171.144/28 max1 10 216.28.152.232/29 207.170.143.0/29 207.170.143.160/28 207.170.161.1 207.170.161.2/31 207.170.161.4/30 207.170.161.8/29 207.170.161.16/28 207.170.161.32/29 207.170.161.40/30 207.170.161.44/31 207.170.161.46 207.170.161.48/28 207.170.161.64/28 207.170.161.80/29 207.170.161.88/30 207.170.161.64/28 207.170.161.80/29 207.170.161.88/30 207.170.161.92/31 207.170.161.128/27 207.170.161.160/29 207.170.161.168/30 207.170.161.172/31 207.170.161.193 207.170.161.227 207.170.161.239 funny things: ip route 10.220.220.144 255.255.255.240 209.115.29.8 ip address 10.6.15.2 255.255.255.0 secondary I don't see where acl 1|2|3|4 are used? do you want the nul routed nets to still be blackholed or give them another chance? 209.115.29.109 is down and no longer routes for 216.29.153.128/28 216.28.152.x are all remote ISDN IPs 216.29.171.1/24 is local and remote 208.49.48.1/24 is unused.... these mean you arn't looking in bgp for routing ip route 208.30.158.0 255.255.255.0 206.183.241.27 ip route 208.30.159.0 255.255.255.0 206.183.241.27 ip route 66.94.80.1 255.255.255.255 67.17.220.73 ip route 0.0.0.0 0.0.0.0 206.183.241.25