RTR_HQ apilbeam

RTR_HQ#sh run
Building configuration...

Current configuration : 2201 bytes
!
! Last configuration change at 13:20:49 UTC Tue Apr 24 2012
! NVRAM config last updated at 13:18:42 UTC Tue Apr 24 2012
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname RTR_HQ
!
boot-start-marker
boot-end-marker
!
logging console informational
logging monitor informational
!
no aaa new-model
dot11 syslog
!
!
ip cef
!
!
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
multilink bundle-name authenticated
!
!
voice-card 0
 no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
 log config
  hidekeys
!
!
crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 2
crypto isakmp key isakmpkey address 0.0.0.0 0.0.0.0
crypto isakmp invalid-spi-recovery
!
!
crypto ipsec transform-set DMVPN_SET esp-3des esp-md5-hmac
 mode transport
!
crypto ipsec profile DMVPN_PRJ
 set transform-set DMVPN_SET
!
!
!
!
!
!
!
!
interface Tunnel0
 bandwidth 10000
 ip address 172.17.100.1 255.255.255.0
 no ip redirects
 ip mtu 1400
 ip nhrp authentication secretid
 ip nhrp map multicast dynamic
 ip nhrp network-id 101
 ip nhrp holdtime 450
 ip tcp adjust-mss 1360
 tunnel source GigabitEthernet0/0
 tunnel mode gre multipoint
 tunnel key 10101
 tunnel protection ipsec profile DMVPN_PRJ
!
interface GigabitEthernet0/0
 description HQ WAN
 ip address 1.1.1.1 255.255.255.248
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 description HQ LAN
 ip address 10.1.1.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
ip default-gateway 1.1.1.2
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0
ip route 10.10.10.0 255.255.255.0 Tunnel0
!
!
ip http server
no ip http secure-server
ip nat pool NAT_POOL 1.1.1.1 1.1.1.1 prefix-length 29
ip nat inside source route-map STOPNAT pool NAT_POOL overload
!
logging dmvpn
access-list 110 deny   ip 10.1.1.0 0.0.0.255 10.10.10.0 0.0.0.255
access-list 110 permit ip 10.1.1.0 0.0.0.255 any
!
!
!
route-map STOPNAT permit 10
 match ip address 110
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
 login
!
scheduler allocate 20000 1000
!
end

RTR_HQ#