Full Mesh or Hub and Spoke?

[Charger1129]

Hello! I was wondering if I can get some opinions on doing a network as a Full Mesh or Hub and Spoke design. I have about 20 sites all over with primarily Cisco ASA firewalls anywhere from 5505, 5506, 5510, 5520, 5515 and they all have site-to-site VPN tunnels. 

I really like the idea of a full mesh design, creates some redundancy and allows the locations to get to each other without having to go through a central Hub. However, maintaining all the tunnels is not the easiest thing in the world and can be time consuming.

Was curious what other folks thought and if they've run in to the same issues trying to do a Full Mesh design. 

[Philip D'Ath]

If you were using Cisco IOS routers then you could use DMVPN, and this would be trivial ...

In an ASA environment like this it is not practical to do a full mesh.  The configs would be huge and unmanageable.

[Charger1129]

Yea that's the challenge I'm having, managing all the tunnels is a bit inconvenient.