Hello @Bryan-N Cheers for sharing..

HelloCan you confirm what routing process and phase design if running on the dmvpn? Possibly share the hub(s) and spoke(s) configuration?

HelloOn the Cat9k switch can you post the exiting cfg please ( exclude any sensitive information)

helloapply the nat domains to the l3 interfaces on the cat 9k along at the cat9k have reachabilty to the vm subnet it should work as per that example i posted previously  wan interface (svi/routed port) = ip nat outside lan interface (svi/routed port...