IPSEC with multiple networks

[tbaror]

Hello ,

i need to establish site to site with remote aws gateway , the issue i have is that on my local network , i have following networks
212.x.x.x and 172.18.x.x ,172.17.x.x.x
My issue is, when i create site to site i need to specify only one local CIDR , is there a way to pass multiple CIDR in one tunnel ?
Please advise
Thanks

[jimp]

You would use separate P2 entries for each subnet.

Though you could combine the 172.x.x.x as 172.16.0.0/14 which would cover both 172.17 and 172.18, so long as it doesn't conflict with anything else you are doing.

Alternately, use routed IPsec then you don't need to worry about tunnel mode policies at all.