Information Technology Reference
In-Depth Information
7-18. Managing IPSec Hardware Acceleration
Problem
You want to enable or disable IPSec hardware acceleration on a network interface card (NIC).
If you have hardware acceleration enabled on an NIC, you may wish to temporarily disable it
as a troubleshooting measure.
Solution
Using a Command-Line Interface
The following command will disable IPSec hardware acceleration on a Windows Server 2003
computer:
> reg add HKLM\system\currentcontrolset\services\ipsec /v EnableOffload
/t REG_DWORD /d 0 /f
Using the Registry
To disable IPSec hardware acceleration on a Windows Server 2003 computer, configure the
following Registry key and reboot the target computer:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPSec\]
"EnableOffload"=dword:0
Set this value to
1
to reenable hardware acceleration.
Using VBScript
The following script disables hardware acceleration on a Windows Server 2003 computer:
' This code disables IPSec hardware acceleration on the local computer
' ------ SCRIPT CONFIGURATION ------
const HKEY_LOCAL_MACHINE = &H80000002
strComputer = "."
accelerationEnabled = 0 ' set to 1 to enable
' ------ END CONFIGURATION ---------
Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" &_
strComputer & "\root\default:StdRegProv")
KeyPath = "SYSTEM\CurrentControlSet\Services\IPSec"
ValueName = "EnableOffload"
dwValue = accelerationEnabled
oReg.SetDWORDValue HKEY_LOCAL_MACHINE,KeyPath,ValueName,dwValue
