Configuration of tunnel, firewall and/or other positional based functionality for routers operating within a multi-router network is contemplated. The functionality configured for one or more of the routers may be implemented automatically without manual input or identification, such as to facilitate an off-the-shelf implementation process where positioning and attendant functionality is routinely implemented according to a predefined set of roles.