You can prevent the dynamic creation of spoke to spoke tunnels by limiting the number of IKE sessions a spoke can create to one (just spoke to hub) using the following command.crypto call admission limit ike sa 1You can also tell nhrp to only connect...