Hardware choices notwithstanding, I would like to comment on your IP scheme. To me it doesn't make much sense to have 192.168.1,10,30,50 in one location and 192.168.20,40,60 in the other.
It would make more sense to have 192.168.1,10,30,50 in one location and 192.168.70,80,90 in another. That way you could cover all subnets in the other location from both sides with one route (in OpenVPN, IPsec phase 2, etc.)
Site 1 could reach everything at site 2 with 192.168.64.0/18 and site 2 could reach everything at site 1 with 192.168.0.0/18
Just a thought.