IPSec VPN with Multiple Remote IPs

[Jay_W]

I am attempting to create an IPSec VPN connection to a facility that requires three individual IP addresses allowed to process data.  They are non-consecutive IP addresses (example 172.16.8.12, 172.16.8.23, 172.16.8.87).  I have set up VPNs using single IP and subnet/network range but I am uncertain how to configure for three individual IP addresses.  They will not give me access to their subnet beyond that approved three addresses.  Do I set up three phase2 IP/32 addresses?  Any assistance would be greatly appreciated.

Thanks,
Jay

[jimp]

Use three separate Phase 2 entries.

[Sharaz]

i have done something similar before, except i created the phase1 and phase2 as if they were completely normal using the full /24 lan subnet, but then on the IPSec firewall rules tab, i did not create an any:any rule.  i just created a rule for the specific IP address(s) that were allowed to access the tunnel.