How to use IPSec to implement secure communication between servers

Intermediary transaction http://www.aliyun.com/zixun/aggregation/6858.html ">seo diagnose Taobao guest cloud host technology Hall

Now most of the Web site's database is using Microsoft SQL Server, now if you want to achieve secure communication between the two servers, which requires 1433 (or another) port, this requires the use of IPSec IP filtering. The procedure is as follows:

1. First, go to Control Panel-system and security-administrative tools-local security policy, after you go, right-click IP Security Policy, on local computer, select Manage IP filter table and filter actions, and then go to a dialog box like this

2. First go to "Manage IP filter List", select Add,

3. Here I fill in the name and description on the 1433permit, then click Add, go to IP Filter Wizard

4. Then directly next to fill out the description, next, select

5.IP address to fill in the IP address you want to provide data communications, next, select My IP address

6. Next, select the port type

7. Select the port number, next, complete.

8. Such a filter is established

9. Then imitate the previous 2-7 steps to build 1433block, the difference is in the 4th time to select any IP address, so that two IP filters are set up, the following figure.

10. The next step is to set up a filter operation, one is to prohibit the operation, one is to allow the operation, first to establish the allowed operation

11. Next, choose License

Then the operation of the reference above to establish a prohibited operation, the difference is the choice of action behavior when the choice of blocking can be.

12. The final step, and also a critical step, is to start building IP Security Policies

Click Next to select

13. Upon completion of the establishment

Add IP Security rules, default click Next, Next, until this step

Select the filter and then select the filter action so that you have a permitted action

14. According to the above method, and then establish a prohibited operation, so that a 1433IPSEC is established.