Vpn ipsec help

Hi Guru

please advise me how to setup vpn to gain access to all device on head office and branch ip subnet 172.16.0.1/18 and 192.168.1.1/24 range
Head office with rb4011
branch haplite

i want client from head office to access all branch and their local subnet as well connect to lan
WAN Network Diagram Template.vpd.jpg