hello, I'm trying to design a vpn solution that includes multiple field offices that carry both IP and non-IP traffic. Because of the large number of sites that have to be encrypted, my questions are as follows:

1. can dynamic vti and dynamic crypto maps be configured simultaneously on the hub routers?

2. I have noticed in the vti configuration that the virtual template has a tunnel mode of ipsec, can this be changed to use gre instead? This could prevent the configuration of large numbers of static gre tunnels.

any help would be appreciated.