Running Simultaneous Features on Blue+ : Implementation Questions

Trying to figure out which devices would be best for our needs. After reading through the documentation it's unclear to me what functionalities can run\be implemented simultaneously.  Can a Blue+ device operate as a VPN Server and as a VPN Client at the same time?  Can a single device support 'site to site' and 'remote access' connections at the same time?  Perhaps more importantly here is what we wish to accomplish. 

Objectives:                                             

1. Establish a permanent 'site to site' VPN between two local networks (A) hosting the server and (b) with a client appliance; thus creating a unified network environment [Ab] such that authorized nodes connected at either location can resolve one another.
   
                                    [ (A) <=====> (b) ]
   
   
   
2. Enable an external user means to periodically connect a single remote node (r) e.g. a laptop running a software client, to the [Ab] network; such that the remote node can resolve devices at either location.
   
                       (r) ——> [ (A) <=====> (b) ]

Can either of the following be accomplished with just two Blue+ devices one at (A) and one at (B) or will I need additional/alternative devices?

Site to site and Remote access    (r) ——> [ (A) <=====> (b) ]

• A device (r) acts as a 'remote access' client.
• A device (A) acts as server for both 'site to site' and 'remote access' connections at the same time.
• A device (b) acts as a 'site to site' client.

Server and Client       (r) ——> [ (A\a) <=====> (B) ]

• A device (r) acts as a 'remote access' client.
• A device (A\a) acts as remote access server and a 'site to site' client.
• A device (B) acts as a 'site to site' server.

Sorry for the obviously noob questions and thanks in advance.  What is more, if you know of any particular documentation that I may have overlooked and might be helpful; please recommend.

Thanks.