you can use mGRE + NHRP. You don't need IPSec. IPSec is needed only if you need security encapsulation. However, there is one requirement. All the GRE tunnel interfaces must be in the same IP subnet. Otherwise you have to create different tunnel
interface for remote site.
ttp://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008014bcd7.shtml