Joe Shen wrote:

I'm sorry I made a mistake the subnet between catalyst4006 and customer's firewall is

10.10.1.213/30, Catalyst4006's interface address is 10.10.1.213, firewall's interface address is 10.10.1.214.

Have you tried enabling a monitor port on the Cat4k and sniffing what exactly is going on? -- Robert Blayzor, BOFH INOC, LLC rblayzor@inoc.net PGP: http://www.inoc.net/~dev/ Key fingerprint = 1E02 DABE F989 BC03 3DF5 0E93 8D02 9D0B CB1A A7B0 Esc key to reboot Universe, or any other key to continue...