Hub - Spoke gateway - Dynamic Public IP ( Spokes-branchs ) 

Hello community, good afternoon. 

I have a question regarding the sdwan borderless wan part of Netskope.

Understanding a Hub-Spoke architecture

Where I have one or a few SDWAN Gateway in Hub mode and other Spoke branches with their corresponding gateways.

My doubt is the following.

If I have Spoke/BranchOffice sites, where eventually there is a need for some other connection from the other branches to some particular resource of that branch, I would understand that it is not necessary that my Gateway - Spoke sdwan does not have static public IP, but dynamic either by 4G/5G or some high quality ADSL connection and / or public IP links Dynamics, for the Gateways / Spoke would not be critical to have static public IP where if in the case of the Hub if you have preferably static Public IP and / or port forwarding to the IP of the gateway-sdwan. Hub, but if it could allow and set up the tunnels and according to the policies would allow access to some other branch to some or some resources of the different branches with its gateway Spoke/Branchoffice. 

Can someone help me to rectify these doubts?

Thank you very much for your time, cordiality, good vibes and collaboration. 

I remain attentive

Best regards