SECPATH F100-C-G2 ipsec VPN 多网段互通如何实现？

已经能实现互通了，如要增加多网段是否只要在出口acl中deny掉，再增加ipsec的保护数据流就可以了？ 为什么通道里只有一个网段的数据流？

<H3C>dis ipsec sa brief

-----------------------------------------------------------------------------

Interface/Global          Dst Address       SPI         Protocol    Status     

-----------------------------------------------------------------------------

GE1/0/1                   140.206.97.82     3920204953  ESP         Active     

GE1/0/1                   180.165.126.12    3175925396  ESP         Active     

                          6                                                    

<H3C>dis ipsec tunnel tunnel-id 0

Tunnel ID: 0

Status: Active

Perfect forward secrecy: dh-group2

Inside vpn-instance:

SA's SPI:

    outbound:  3920204971  (0xe9a994ab)   [ESP]  

    inbound:   3322257913  (0xc605a1f9)   [ESP]  

Tunnel:

    local  address:  180.165.126.126

    remote address: 140.206.97.82

Flow:

        sour addr: 172.16.1.0/255.255.255.0  port: 0  protocol: ip

        dest addr: 172.16.45.0/255.255.255.0  port: 0  protocol: ip

<H3C>