DMVPN State of a tunnel

The show dmvpn command displays DMVPN session information. The output looks something like this:

Device# show dmvpn Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete N - NATed, L - Local, X - No Socket # Ent --> Number of NHRP entries with same NBMA peer ! The line below indicates that the sessions are being displayed for Tunnel1. ! Tunnel1 is acting as a spoke and is a peer with three other NBMA peers. Tunnel1, Type: Spoke, NBMA Peers: 3, # Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb ----- --------------- --------------- ----- -------- ----- 2 192.0.2.21 192.0.2.116 IKE 3w0d D 1 192.0.2.102 192.0.2.11 NHRP 02:40:51 S 1 192.0.2.225 192.0.2.10 UP 3w0d S Tunnel2, Type: Spoke, NBMA Peers: 1, # Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb ----- --------------- --------------- ----- -------- ----- 1 192.0.2.25 192.0.2.171 IKE never S

The State column indicates the current status of the specific peer. This column can display any one of the following:

  • UP - this indicates that the DMVPN session is up
  • IKE - this indicates that the DMVPN session is down due to an IKE error
  • IPSec - this indicates that the DMVPN session is down due to an IPSec error
  • NHRP - this indicates that the DMVPN session is down due to an NHRP error

Links:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/s1/sec-s1-cr-book/sec-cr-s4.html#wp2815505246