ipsec transport traffic from router to host

james_stickland · ‎02-12-2008

Hello, I'm tired of trying to write appropriate firewall rules for management traffic between this router and the management station. Is it possible to transport traffic generated from/to the router with a host on an interface?

I would like to just say "do IPsec for all tcp and udp traffic between this routers interface and this host on that interface"

Or, is this like ACLs, whereas you cannot affect traffic which originates from the router?

royalblues · ‎02-12-2008

Basically you need to configure the encryption domain between the required interfaces and then define the interesting traffic in the form of access-list.

Other traffic that does not match the access-list criteria do not get encrypted and are sent natively

HTH

Narayan