Re: Basic IPSec question.

Thanks guys:

I am just posing a theoretical question.

I am learning IPsec (I thought you MS guys did "IPSec") and I know it
requires a SID in Group Policy to set it up. A SID for the Domain. So...the
question crossed my mind, how does it trust a router that doesn't join AD? I
want packets coming from the router/firewall allowed.

I am supposing you have to make an exception in the firewall then.

That's all. (Just discussing it helps... like what Roger said below.)

thanks!





"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:ujzA378$GHA.204@xxxxxxxxxxxxxxxxxxxxxxx
I think you need to clarify what you are attempting/asking.

The IPsec Bypass flag only has affect in allowing an incoming
pack that is received within IPsec authentication to bypass the
Windows Firewall. That is, if an IPsec security association had
been set up, then packets received within that sa are allowed to
not also have to meet the definitions in the Windows Firewall.

I can see no way that this has anything to do with routers.


"Purtech" <mikek(remove)@hlit.net> wrote in message
news:edmbVk4$GHA.5060@xxxxxxxxxxxxxxxxxxxxxxx
So if I get IPSec bypass running on my internal network, how do I handle
a router that is attached to the Internet?

A 3rd party router won't be joined to AD. ----Now this is without ISA.

Do I make Exceptions for it? (WF is up.) Or is there another or preferred
way? Are there routers that can join AD?

Thanks





.

Relevant Pages

  • Re: How safe us my wireless network
    ... -) I've set an obscure password for the router. ... because the payload isn't encrypted anymore. ... IPSec works on Layer IP your tcp packet is encrypted and if you use AH ...
    (comp.security.firewalls)
  • RE: SDSL VPN main to bmain
    ... created between ISA2004 and Zyxel router to router to router IPSec VPN. ... 867483 How to configure networks in ISA Server 2004 ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN connection question
    ... Unfortunately that doesn't address setting up Ipsec sessions. ... encryption in hardware within the router, ... then doing a vnc or remote desktop to the appropriate machine. ... Service Client on my laptop connects natively to the Remote Desktop ...
    (Ubuntu)
  • Re: VPN / IPSec Help
    ... > it might be quicker to setup PPTP to use over your VPN rather than L2TP. ... > This is still very secure, not as secure as L2TP but it doesn't use IPSEC ... >>> Does your router act as a NAT or are you using ICS?? ...
    (microsoft.public.win2000.security)
  • Re: VPN nightmare
    ... Assuming both sites run Cisco routers, the IPSec VPN is just give a 24/7 connection and no thing to do with Windows. ... I've been trying to get a Cisco 800 series router to manage a VPN ...
    (microsoft.public.windowsxp.work_remotely)