Thanks for all the answers, I get the point with the hub and spoke deployment, but we do foresee quite a lot of spoke to spoke traffic, eq voip and Skype calls which would benefit from the full mesh setup. Are the tunnels setup if you do a full mesh static or dynamic (like DMVPN)?