yes thay can ping out, the 2901A does have a static route sorry i must of removed accidentally from the config i posted. the reason the 881 does not have dhcp for the default route is because i was forcing it out a different internet connection that what it would get via dhcp, that way the routing would not interfere with the dm tunnel. of couse later i just set a static address on the router from one of the open address we had that way i could eliminate the nat barrirer(but that had no affect same thing was happening). I then removed the ipsec encryption from the tunnel (trying to eliminate ipsec from the equation) and got many of these on the 2901A "Failed to retrieve NHRP IDB in IF ctrl check" dumbfounded so i tryed this:
since i was getting nowhere on that 2901 (lets call it 2901A)removed the dmvpn tunnel and recreated it on anouther 2901 (lets call that one 2901B) that was handing the other half(not really half)) of our many many point to point connections, and with a minor tweek of that ones firewall the DMVPN is working on that one. so now i have to figure out why 2901A would not allow DMVPN. If you were wondering the DMVPN config between the routers were identical. I realy would like to get DMVPN running on the 2901A since it only has 20 point to point vpn connections on it and 2901B has 34 point to point vpn connections. (if only i could convince management to get a single cisco 3925) one can dream.
