DMVPN - show crypto session - showing session status: down-negotiating

[shafhuss]

We have configured two hubs and two spokes, but the tunnel is not coming up. when checked in debug logs, it is not going further - it struck at IKE_I_MM2

Here are the logs for your reference.

[Rob Ingram]

Hi,
Is this a new deployment or did this previously work?
The errors would seem to indicate a communicate issue when attempting to establish a tunnel. Is there a firewall/ACL in the path? Is UDP 500 and ESP permitted? If natting you'll need UDP 500 and UDP 4500 (NAT-T).

HTH

[shafhuss]

Client has confirmed that there is no firewall/acl. Router is directly speaking to ISP. There are two new spokes configured, however there are already another 6 spokes which are connected to 2 hubs and are working fine.

[Rob Ingram]

Are these debugs from the spoke or the hub?
Can you please provide the running config from the spoke and hub please?

[shafhuss]

Here are the debug logs from both spokes. Can you please let me know your email id on which i can share the config. 

(I cannot put the config here as it could be made public)