I believe I've purchased enough hardware to setup a Site-To-Site VPN connection between a headquarters and a site location. For the HQ, I've got one hardware controller, one switch (TP-Link TL-SG2210P