I am working on DMVPN with EIGRP as the routing protocole.. I was wondering in if in DMVPN the EIGRP packet are encapsulated with IPsec between relay nodes or not? (Router R7 and R6 or R5 in the figure ) or the IPsec security association is negotiated only between the hub and the spokes routers?