I attached a pic to help - don't have Visio. Let's say HQ router is head end router with all IPSEC configs for remote sites. The circuit goes to another location (Provider in diagram) who handles the physical connections to the remote sites. So remo...