DMVPN tunnel stuck at NHRP state

[prakashrajasekaran2807]

HI Experts and friends,

We use DMVPN and Eigrp as routing protocols to Connect between sites. I am facing a peculiar issue.

The dmvpn Hub router shows tunnel up for the spoke IP  router but the spoke router is stuck in the NHRP state.

Hub:

WAN-RT-01#sh dmvpn
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
N - NATed, L - Local, X - No Socket
T1 - Route Installed, T2 - Nexthop-override, B - BGP
C - CTS Capable, I2 - Temporary
# Ent --> Number of NHRP entries with same NBMA peer
NHS Status: E --> Expecting Replies, R --> Responding, W --> Waiting
UpDn Time --> Up or Down Time for a Tunnel
==========================================================================

Interface: Tunnel20, IPv4 NHRP Details
Type:Hub, NHRP Peers:19,

# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb
----- --------------- --------------- ----- -------- -----

1 195.73.222.85 10.0.0.11 UP 23:40:33 D

Spoke :

Type:Spoke, NHRP Peers:4,

# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb
----- --------------- --------------- ----- -------- -----
1 69.199.183.34 10.0.0.1 NHRP 23:55:25 S

Kindly help to troubleshoot the issue. I can ping the public IP addresses of the two sites its working fine and I worked with the provider told me there is no issue between the source and the destination.

[prakashrajasekaran2807]

Hi Paul,

if i do sh ip nhrp , it shows this only. Can you please explain where to find socket

BLR-RT02#Sh ip nhrp
10.0.0.1/32 via 10.0.0.1
Tunnel20 created 1d23h, never expire
Type: static, Flags:
NBMA address: 69.199.183.34

[MHM Cisco World · Accepted solution]

I success get the issue, 
I do lab try 
add ACL in
add ACL out 
no success until I figure out that the issue is Spoke change the interface IP, it can if router use DHCP or Dailer interface, 
I change the interface IP of spoke and I get same issue as you
Hub show UP
spoke show NHRP 

so your problem is Spoke is change the IP
OR 
if all hub show UP and only one show NHRP, then there new NAT device add between the Spoke and Hub make Spoke IP change.

[prakashrajasekaran2807]

Its was a provider issue . they rerouted the path and it resolved the issue. port 50,51,500,4500 are the essential ports