A network apparatus with secure IPSec mechanism and method for operating the same are disclosed. The network apparatus includes a VLAN, an MAC filter, an IP restriction unit and a static DHCP. The network apparatus provides physical separation between VPN and other untrustful network before a message is sent to an IPSec channel. Therefore, the IPSec channel can be securely accessed. The network apparatus is applicable for both household network and VPN.