Cisco ISR DMVPN error

jrblanquez · ‎10-31-2019

Hi everybody.

I have a deplyment with 4 cisco ISR running DMVPN. All work fine but I see error between 2 ISR (both spokes). I have been searching unsuccesfully. Can help me?

This is error:

Nov 1 05:38:12.468: %NHRP-3-PAKERROR: Received Error Indication from 192.168.200.32, code: administratively prohibited(4), (trigger src: 192.168.200.32 (nbma: 122.176.102.247) dst: 192.168.200.60), offset: 17, data: 00 01 08 00 00 00 00 00 00 FF 00 78 46 0B 00 3C
Nov 1 05:38:24.041: %NHRP-3-PAKERROR: Received Error Indication from 192.168.200.32, code: administratively prohibited(4), (trigger src: 192.168.200.60 (nbma: 64.183.16.116) dst: 192.168.200.32), offset: 17, data: 00 01 08 00 00 00 00 00 00 FF 00 48 39 C1 00 34
Nov 1 05:39:08.338: %NHRP-3-PAKERROR: Received Error Indication from 192.168.200.32, code: administratively prohibited(4), (trigger src: 192.168.200.32 (nbma: 122.176.102.247) dst: 192.168.200.60), offset: 17, data: 00 01 08 00 00 00 00 00 00 FF 00 78 46 0B 00 3C
Nov 1 05:41:43.066: %NHRP-3-PAKERROR: Received Error Indication from 192.168.200.32, code: administratively prohibited(4), (trigger src: 192.168.200.32 (nbma: 122.176.102.247) dst: 192.168.200.60), offset: 17, data: 00 01 08 00 00 00 00 00 00 FF 00 78 46 0A 00 3C
Nov 1 05:41:52.871: %NHRP-3-PAKERROR: Received Error Indication from 192.168.200.32, code: administratively prohibited(4), (trigger src: 192.168.200.32 (nbma: 122.176.102.247) dst: 192.168.200.60), offset: 17, data: 00 01 08 00 00 00 00 00 00 FF 00 78 46 0A 00 3C
Nov 1 05:42:08.445: %NHRP-3-PAKERROR: Received Error Indication from 192.168.200.32, code: administratively prohibited(4), (trigger src: 192.168.200.32 (nbma: 122.176.102.247) dst: 192.168.200.60), offset: 17, data: 00 01 08 00 00 00 00 00 00 FF 00 78 46 0A 00 3C
Nov 1 05:42:36.596: %NHRP-3-PAKERROR: Received Error Indication from 192.168.200.32, code: administratively prohibited(4), (trigger src: 192.168.200.32 (nbma: 122.176.102.247) dst: 192.168.200.60), offset: 17, data: 00 01 08 00 00 00 00 00 00 FF 00 78 46 0A 00 3C

Thanks.

Rob Ingram · ‎11-01-2019

Hi,
I think error code 4 (administratively prohibited) means the NHS received a resolution request for an IP address which is not part of the subnet assigned to the NHRP enabled interface. Or the spoke is configured with "ip nhrp server only" and is receiving an NHRP resolution request from another spoke.

Please enabled NHRP debugs and provide the output, also provide your configuration of the hub and spoke to troubleshoot further.