how to add another host (/32) on vpn community from an existing ipsec tunnel

[leangf_leangf1]

Hi,

I have a working ipsec tunnel configured both fws are CPs with a single host defined on vpn community. I have a requirement to utilize the same ipsec tunnel but the hosts will be different.

Any suggestions or approach to do this?

thx.

leangf

[leangf_leangf1]

Does Global VPN Communities applicable on this setup? 

[PhoneBoy]

Any host that will need to use the VPN will need to be included in the Encryption Domain (either directly or indirectly via a network).
For the relevant VPN to use the "same tunnel" the relevant VPN community will need to have One VPN tunnel per Gateway Pair set in Tunnel Management > VPN Tunnel Sharing.

[the_rock]

I would say add it to existing enc domain and make sure if its mix of subnets/hosts to check option "per gateway" in the tunnel management tab.

Andy