http://security.zdnet.com.cn/security_zone/2008/1205/1267745.shtml http://www.23day.com/html/22902.html ipsec限制一台访问