I would like to enable IPSEC on my network in the following manner Server Require on the internal LAN ( meaning I want IPSEC always and not allow non ipsec transmission) On the external LAN I want to use IPSEC only for my incoming and outgoing VPN connections. I do not want to use a Certificate Authority for the time being. Can anyone tell me how to do this? William