Hello Nick,
Thanks very much for your answer. VPN tunnels won't be allowed from my main VLAN, so the option to have the master in the DMZ coule be the solution. Or maybe have the one in my VLAN and the one in my DMZ on the same 'master - level' and the one in the remote site as slave ?