Hi KPS,
Org level profiles that span multiple groups has been a feature for several years now. I know of at least one org that puts it’s fusionhubs in an ‘HQ’ group and several hundred transit devices in a second ‘vehicles’ group.
If, for some odd reason, you’re unable to create an org profile, please create a support ticket. Being able to see the pepvpn management page from group but not org level would normally only occur if your admin rights were restricted to the group level.
Subtunnel support is definitely on the roadmap for the very near future.
IC2 actually DOES support a mixed mode for Star & PtoP topologies where some subset of the endpoints are managed via firmware or a different organization. Please see:
As of the upcoming 2.8.0 version, we’re planning to allow for the ability to have profiles managed from both the firmware and IC2 interfaces. Please see:
(actually, you should already have seen this, as it was a reply to your posting, but it should help anyone else following this thread in future)
Regards,
-James