Take the Win2003 system as an example:
Operation (see figure):
1. Task: now 192.168.2.200 accessible; local ban on access to it
2. Access: Administrative Tools, local Security settings->ip security Policy
3. Right-click to create IP Security policy
4. Popup wizard, such as: (Always select [Yes] or [next] until completed, the period to fill in the name can be filled in, I fill in the "test")
5. Complete the Add Wizard see:
6. Deselect the ' Add Wizard ' checkbox and click Add, as:
7. Please fill in the name, then cancel using the Add Wizard tick, click Add
8.(IP Filter property is a extrapolate place), select Add Parent Address 2.200, and then determine
10. After returning, select the newly built Forbidden IP access and select the Filter Action tab:
11. Uncheck Use Add Wizard and click Add
12. Select block, then add block to the general name (fill it in), and then OK to return
13. Go back and select "Block", then click ' Apply, determine what.
14. Find the new "test" and right click on assign! (Note: To start the IPSec service before this operation, if it does not start, please go to the service there to launch it, such as the following 2)
15. OK, the assignment succeeds, again the cmd command accesses 2.200: it is inaccessible!!!
[Windows System] uses IPSec to restrict access to the specified IP