Does anyone think we might someday get the ability to create multiple VPNs that the RVs currently prevent claiming to have a conflicting remote subnet? If you have internally routed subnets besides the primary subnet or want to create certain star configs you can't save these tunnels. The RV will claim that a remote subnet conflicts with another tunnel profile. Even though the local subnet is different (because of the internal route) and IPSEC legal the RV won't let you save the new profile. Sometimes you can't create a subnet spec that covers all the intended subnets. Multiple tunnels is a proper way to accomplish this but the interface won't let you do it. As long as both subnets don't conflict it should be allowed.