In article , Mike wrote: :I apologize, I did leave out a very important detail. The "hub" site :WILL have a static IP.
Yeah, that's a pretty important detail in this case ;-)
If you have a static hub site then your options include PIX 7.0 on a 515/515E, 525, or 535.
You options might also include a VPN 3000 series -- I'm not as familiar with them.
The dynamic spoke system mentioned previously is kind of interesting: it is especially suited for the case where even the number of spokes is regularily changing, and it is necessary to bring a new one online quickly (e.g., new branch offices.)
Depending on what you are attempting to accomplish, there is something else you might wish to consider. There is, my co-worker informs me, a project currently active which essentially creates a private Internet through sites VPN'd together using free software. I do not recall the name of the project/software, but I could find out easily.