If the remote sites are connected to the hub site via Ethernet bridges, you do not need to use DECnet "tunneling" as long as the bridges pass the AppleTalk packets. On the other hand, if the VAX systems function as half bridges with bridge processes on one communicating with other bridge processes using DECnet as the link between them, "tunneling" is required.
"Tunneling" is available for AppleTalk for VMS 2.0. You do not have to wait for AppleTalk Phase 2. However, you should be aware of some possible "tunneling" problems with AppleTalk for VMS 2.0. These problems are documented in the Tech Info Library. Search on "tunneling".