Full mesh for multi site over broadband

[MarioMarquez]

I have a few PA 200's all with base license ready to install for a multisite company that needs a full mesh all over broadband internet. I am willing to manually configure each IPsec tunnel one by one if that is a good free option that does not require additional licensing. Can someone give me advice on the best way to accomplish this setup and what licensing is needed for the options given? I do have Panorama.

[Chacko42]

you can also do LSVPN and GlobalProtect - no additional licensing required.

Unfortunately you can currently build hub-spoke topologies only, but that will help you with setting up the tunnels with less administrative effort

[MarioMarquez]

Thanks. Does that feature have a license I can buy to do a full mesh? What are your thoughts on manually building a full mesh using standard ipsec configuration for each tunnel? Is it just the time & labor that is the set back or will production be at some sort of risk?

[Chacko42]

full meshed topology is currently not supported/configurable.

you will need a GP license only, if you want to support HIP profiles or mobile devices.

No, static tunnels are fine, but the amount of tunnels needed with raising branch offices is huge.

Tunnels needed with n full meshed sites: (n*(n-1)/2