Multiple source and destination networks, multiple single hosts in IPSec… how?

[sugar]

Hello, I just setup a IPSec tunnel, but I can't configure more than one host/network in the local or remote subnet… how can I accomplish this?

That feature is very common on other firewall/vpn vendors..

thanks in advance

Aldo.

[pmb1010]

yeah I have same need.

http://doc.pfsense.org/index.php/IPSec_with_Multiple_Subnets

and some recent dialog that says it does't work so good
(I did not look for newer posts)
http://forum.pfsense.org/index.php?topic=16972.0

[jimp]

Parallel tunnels are the way to go for this in 1.2.x, some people are using them with no ill effects.

In 2.0 this will be a non-issue, as you can have multiple phase 2 entries for each phase 1 entry, so you can specify as many subnets (or single hosts) as you like.