1

I have a server which basically acts as a router, but also offers some other services. The server has 3 interfaces, one leading to the main LAN and one to a server segment. Both these interfaces have an IPSec policy applied, but some servers on the server segment do not require IPSec or simply cannot function with IPSec enabled.

Once RRAS is configured, is the IPSec policy applied on the traffic that is routed through the server, or only on the traffic that is directed at the server, or does this depend on the policy that is used?

So if I want to connect to RRAS server, IPSec should work as expected, but if I want to connect to a server on the server segment from the LAN, the IPSec policy should not interfere and the traffic should be routed as usual. Is this possible?

Improve this question

1 Answer 1

Reset to default
1

IPSec policies apply to communications TO and FROM a given server, but not THROUGH it; a RRAS server acts as a network router, and any IPSec policies applied to it shouldn't interfere with this.

Improve this answer
2
  • Thanks :-) I'll be testing this here within the next few hours.
    – Jeroen Landheer
    Commented Aug 20, 2009 at 23:06
  • I've tested it here, and it works. I can ping from PC to PC but not the gateway in the middle (because both machines do not comply with the IPSec policy). Very cool.
    – Jeroen Landheer
    Commented Aug 20, 2009 at 23:40

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .