Dear Alan,
The VPN peer IP address is indeed the address of the remote VPN server.
On the other hand, the protected traffic is defined in the "match address" command.
The tunnel will be created from peer to peer, and the SA (Security Association) from local networks to remote networks.
Please let me know if you still have any questions.
Thanks in advance.
Please rate any post that you find useful.