This is our config (GUI also works, but it was easier to copy&paste the
config rather than taking screenshots): config vpn ipsec
phase1-interface edit "Phase 1 Name" set interface "My external
interface name" set ike-version 2 set keylife 28800 set p...
I would say it is probably a good idea. As you said it will breaking the
dependency on the central site, but also the internet access is probably
cheaper and will give you better performance than the T1s you currently
use. Depending on the number of ...