DMVPN tunnel with "if-state nhrp"not working after upgrate to 17.06.03

[EminaBrkanic]

Hello

I performed upgrade on my ISR1K and ISR4K spoke router. DMVPN didn't come up until I deleted command "if-state nhrp" under tunnel interface. It stuck i NHRP state

Does anybody have an idea why?

Regards,

Emina

[balaji.bandi]

how does your full config looks like ?

if-state nhrp - after remove is the tunnel come up and working ? looks may be some bug i guess

read the release notes : 

https://www.cisco.com/c/en/us/td/docs/routers/access/4400/release/xe-17-6/isr4k-rel-notes-xe-17-6.html

if-state nhrp  - its general Monitor and send Trap to Monitoring Servers?

Did you try add again and see is this still works or tunnel go down ?

[EminaBrkanic]

Tunnel is like this:

interface Tunnel100
bandwidth 1000
ip address x.x.x.x 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1400
ip hello-interval eigrp 1 20
ip hold-time eigrp 1 60
ip nhrp authentication Something
ip nhrp map X.Y.Y.Y X.Y.Y.Z
ip nhrp map multicast X.Y.Y.Z
ip nhrp network-id 100
ip nhrp nhs X.Y.Y.Y
ip tcp adjust-mss 1360
load-interval 30
delay 20000
nhrp group RS-GROUP-10MBPS
if-state nhrp
tunnel source Dialer0
tunnel mode gre multipoint
tunnel key 100
tunnel vrf INET01
tunnel protection ipsec profile DMVPN-IPSEC-INET01

if-state nhrp - after remove is the tunnel come up and working ? YES

Did you try add again and see is this still works or tunnel go down ?   NO  -  I will try on next upgrade on another spoke tonight.

There is nothing in release notes related to this issue.

Regards,

Emina

[MHM Cisco World]

if-state nhrp is protect your network from blackhole, 
if the tunnel not up meaning there is something drop the NHRP request. 
when you remove it and tunnel up that not meaning your tunnel can forward traffic.

[balaji.bandi]

as suggested on the spoke try a different version also try adding the command again let us know the outcome.

[Gustavo Medina · Accepted solution]

What is the version of the Hub?
When you upgrade your next spoke can you upgrade to 17.6.4 or 17.6.5 and see if the issue is not present?
I think this may be related to https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwb24123 but we would need debugs to confirm.

[EminaBrkanic]

Hi,

So one HUB is on 16.9.x and the other one is on 17.6.3 version.

I installed 17.3.6 on another spoke last night and everything works fine. So I guess this is definitely a bug. The reason I took 17.3.6 is because it has least NHRP related known issues  in release notes.

Thanks everyone. 

[MHM Cisco World]

Thanks thanks thanks for update us 
have a great day.