The MIST portal shows that the peer paths from the spoke to the hub are showing as down. The KB article describes the steps that can be taken to figure out why the peer paths are down for the hub in the MIST portal

Peer Path showing down for the hub in the spoke wan edge in the MIST portal

For the peer path to the hub to be shown as UP, we need to make sure that the Hub external IP-Address is reachable from the Spoke WAN interface IP-Address.

To test the ping connectivity, please navigate to the WAN Edge --> Utilities --> Testing Tools --> Ping.

Enter the IP-Address of the hub and the network interface of the spoke which will be used for initiating the ping.

If the ping doesn't work, then the customer needs to check the reachability from the spoke towards the hub IP-Address with the ISP. If the ping works, then you can test using the traceroute utility and check where the packet gets dropped.