Note: I have never attempted this before trying today but I knew it was possible due to research online. So I gave it a try and got it to work...
I have one static host (let's call it HOST_S) which is the main site and one dynamic host (called HOST_D) which is one of many remote sites. I want to create a VPN tunnel from static host HOST_S to dynamic host HOST_D.
As you can see in the layout, I'm creating a tunnel between one static host and one dynamic host. Currently I can get this to work flawlessly with no issues at all. The main reason for this question to be posted was to find out if it was possible to do this same thing without using the default Site-To-Site policy (DfltGrpPolicy) and the default tunnel group (DefaultL2LGroup). I have tried to create a new connection profile on the main site (HOST_S) using a peer IP address of 0.0.0.0 and connection name of 0.0.0.0 but that would not work because when HOST_D connects (because it HAS to connect to HOST_S) then HOST_S does not reconize then host trying to connect. It seems that if you want to have non static hosts connect then you have to use the default policy/tunnel settings.
Is there a way to create a new connection profile for a dynamic vpn host that is remotely connecting to the main site?