It was 5 years ago, the original poster is long gone.  I was just leaving the answer for anyone else that showed up.

It's a pretty simple 4 hub (dual hubs at two DCs), 4 net, phase 3, with BGP and bfd.Actually, I have a reasonably representative copy in my lab.  The only significant change is the southbound eBGP at hubs, so I'm just faking the routes.  The DMVPN co...

I was having this same issue with a 4 tunnel/hub configuration, with dual "outside" connections on the spoke side, two tunnels on each. I was able to determine that at least in my case, it was the shared ipsec profile on the DMVPN.  To share a profil...