If for “hairpin NAT” you mean this:
http://wiki.mikrotik.com/wiki/Hairpin_NAT
it’s exactly our configuration, our servers have only private address and only certains ports are forwarded to the servers inside the lan.
in the SiteA the VPN we are talking about is VPN01, and there is no NAT for that 🙁