This is not a question, I solved it. I set up Asterisk trunks between offices, with encryption, some offices do not have fixed IP and login in to the central server. That all went well. Anybody needs it I will help with config files.
In each office we have PAP2Ts attached to the local asterisk server and talking to Sipgate for their local phone service. It worked. Again, anybody needs the configs I'll be happy to post.
The problem was that I got intermittent calls with one way audio (silent calls) and terrible problems with echo - really serious echo. Calls through Sipgate gave no echo, but I think that was down to them doing excellent echo suppression. I went round the houses for months before I found the answer; it was very simple and cured both the one way audio and the echo.