I have a branch office with an IPSec tunnel to the core data center. For the interesting traffic, it's the branch subnet (10.2.0.0/24) to 10.0.0.0/8. This branch now has a need to reach another branch office, so rather than hairpin the traffic off th...