To set up IPSEC, you need to do two things:
- Configure and enable routing and remote access
- Create a rule in the Firewall under "Security and Connection Rules"
After that, everything seemed to work except for one-way pings. It turned out that routing needed to be configured.
On the server where IPSEC is set up:
route -p add 192.168.0.0 mask 255.255.255.0 0.0.0.0 IF 1
On the other PCs:
route -p add 192.168.0.0 mask 255.255.255.0 192.168.1.233 <# 192.168.0.0 - удаленная сеть на которую ходим через IPSEC ::192.168.1.233 - локальный адрес сервера с IPSEC #>
