I think I would go with the 2600 for the router. It might seem like overkill, but this gives you plenty of room for expansion. I would also suggest the Netscreen 204 for my VPN and firewall. The larger organizations that I've worked with used this combination more for their smaller remote sites, much like the one you're describing in your post.