Cisco 1720 losing it configurations

[bhmsi]

We have several hundred client side Cisco 1720 routers. Each one has a 56k CSU/DSU as WIC0 and is powered through an APC BackUPS Pro 1000 battery backup. I have two sites that will lose the configuration settings for no apparent reason. I have swapped out routers and have never found a problem with any of them. I have to reload the router configuration, do a wr mem, and they will run for at least 30 days before I have to go back out and reload them again. Does anyone have a suggestion of something I could check to find out what is causing this?

 

[haknwak]

Any logs? A hack? wr erase? "If you lived here, you'd be home by now!"

George Carlin

 

[bhmsi]

No logs that I know of. It appears as if someone has erased the NVRAM but (unless they hack) they are not supposed to be able to get there. When I get back on site and console in, all I see is the Router> prompt. I reload the config from a text file saved on the clients hard drive.

 

[haknwak]

Unless Cisco or others here have info regarding this as a common occurrence, I'd definitely suspect foul play. Maybe even someone in the client's company.

I think it's definitely time to set up different passwords, logging and such. Remove modem or other outside access. Make it as clean and locked down as possible. Look into other security-related changes to the config.

If you have swapped our routers I think it's unlikely a defect in the device. Possibly IOS update? "If you lived here, you'd be home by now!"

George Carlin