Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a server which basically acts as a router, but also offers some other services. The server has 3 interfaces, one leading to the main LAN and one to a server segment. Both these interfaces have an IPSec policy applied, but some servers on the server segment do not require IPSec or simply cannot function with IPSec enabled.

Once RRAS is configured, is the IPSec policy applied on the traffic that is routed through the server, or only on the traffic that is directed at the server, or does this depend on the policy that is used?

So if I want to connect to RRAS server, IPSec should work as expected, but if I want to connect to a server on the server segment from the LAN, the IPSec policy should not interfere and the traffic should be routed as usual. Is this possible?

share|improve this question
up vote 1 down vote accepted

IPSec policies apply to communications TO and FROM a given server, but not THROUGH it; a RRAS server acts as a network router, and any IPSec policies applied to it shouldn't interfere with this.

share|improve this answer
Thanks :-) I'll be testing this here within the next few hours. – Jeroen Landheer Aug 20 '09 at 23:06
I've tested it here, and it works. I can ping from PC to PC but not the gateway in the middle (because both machines do not comply with the IPSec policy). Very cool. – Jeroen Landheer Aug 20 '09 at 23:40

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.