DMVPN State of a tunnel

The show dmvpn command displays DMVPN session information. The output looks something like this:

Device# show dmvpn
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
        N - NATed, L - Local, X - No Socket
        # Ent --> Number of NHRP entries with same NBMA peer
! The line below indicates that the sessions are being displayed for Tunnel1.
! Tunnel1 is acting as a spoke and is a peer with three other NBMA peers.
Tunnel1, Type: Spoke, NBMA Peers: 3,
 # Ent  Peer NBMA Addr Peer Tunnel Add State  UpDn Tm Attrb
 ----- --------------- --------------- ----- -------- -----
     2    192.0.2.21       192.0.2.116   IKE     3w0d D
     1    192.0.2.102      192.0.2.11   NHRP 02:40:51 S
     1    192.0.2.225      192.0.2.10     UP     3w0d S
Tunnel2, Type: Spoke, NBMA Peers: 1,
 # Ent  Peer NBMA Addr Peer Tunnel Add State  UpDn Tm Attrb
 ----- --------------- --------------- ----- -------- -----
     1      192.0.2.25     192.0.2.171   IKE    never S

The State column indicates the current status of the specific peer. This column can display any one of the following:

  • UP - this indicates that the DMVPN session is up
  • IKE - this indicates that the DMVPN session is down due to an IKE error
  • IPSec - this indicates that the DMVPN session is down due to an IPSec error
  • NHRP - this indicates that the DMVPN session is down due to an NHRP error