The mtu is set on the tunnels alone. The cdp is also disable on all the routers. The netwotk contain around 600 routers and 1000 switches.
below is a config running on one of the branches. Your suggestions are close to what could be the solution but not the solution at the moment.
Building configuration...
Current configuration : 2821 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname xxx
!
aaa new-model
!
!
aaa authentication password-prompt PASSWORD:
aaa authentication username-prompt USERNAME:
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization console
aaa authorization exec default group tacacs+ none
aaa authorization commands 15 default group tacacs+ none
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 5 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa session-id common
enable secret
username xxx password
ip subnet-zero
!
!
ip dhcp excluded-address xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
ip dhcp excluded-address xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
!
ip dhcp pool TRANS_AMADI
network xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
default-router xxx.xxx.xxx.xxx
domain-name UBAGROUP.COM
dns-server xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
netbios-node-type h-node
!
!
!
!
interface FastEthernet0/0
description VGC LINK TO London
ip address xxx.xxx.xxx.15 xxx.xxx.xxx.xxx
no ip route-cache
no ip mroute-cache
duplex auto
speed auto
no cdp enable
!
interface Serial0/0
ip address xxx.xxx.xxx.1 xxx.xxx.xxx.xxx
no cdp enable
!
interface FastEthernet0/1
ip address xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
ip access-group virus in
no ip mroute-cache
duplex auto
speed auto
no cdp enable
!
interface Serial0/1
no ip address
shutdown
no cdp enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx
ip tacacs source-interface FastEthernet0/1
no ip http server
ip pim bidir-enable
!
!
ip access-list extended virus
deny tcp any any eq 69
deny udp any any eq 445
deny tcp any any eq 445
deny tcp any any eq 444
deny udp any any eq 444
permit ip any any
!
no cdp run
tacacs-server host ip tacacs source-interface FastEthernet0/1
no ip http server
ip pim bidir-enable
!
!
ip access-list extended virus
deny tcp any any eq 69
deny udp any any eq 445
deny tcp any any eq 445
deny tcp any any eq 444
deny udp any any eq 444
permit ip any any
!
no cdp run
tacacs-server host xxx.xxx.xxx.xxx
tacacs-server host xxx.xxx.xxx.xxx
tacacs-server key cisco
snmp-server view Subview system excluded
snmp-server view Subview cisco excluded
snmp-server view Subview system.1 included
snmp-server view Subview system.2 included
snmp-server view Subview system.4 included
snmp-server view Subview system.5 included
snmp-server view Subview system.6 included
tacacs-server host 10.0.12.65
tacacs-server key cisco
snmp-server view Subview system excluded
snmp-server view Subview cisco excluded
snmp-server view Subview system.1 included
snmp-server view Subview system.2 included
snmp-server view Subview system.4 included
snmp-server view Subview system.5 included
snmp-server view Subview system.6 included
