To my knowledge there is a module available on the 1700 to do VPN, although its not required. You should have no problem terminating a tunnel or two on the 1700. The module offloads the encryption to a separate processor taking the onus off the routers processor. I think the 1700 is a good choice.