Microsoft Windows [Version 10.0.19045.3570]
(c) Microsoft Corporation. C:\Windows>netsh ras ? The following commands are available: Commands in this context: ? - Displays a list of commands. aaaa - Changes to the `netsh ras aaaa' context. add - Adds items to a table. delete - Removes items from a table. diagnostics - Changes to the `netsh ras diagnostics' context. dump - Displays a configuration script. help - Displays a list of commands. ip - Changes to the `netsh ras ip' context. ipv6 - Changes to the `netsh ras ipv6' context. set - Sets configuration information. show - Displays information. The following sub-contexts are available: aaaa diagnostics ip ipv6 To view help for a command, type the command, followed by a space, and then type ?.
Changes to the `netsh ras aaaa' context.
»netsh »ras »aaaa
C:\Windows>netsh ras aaaa ? The following commands are available: Commands in this context: ? - Displays a list of commands. add - Adds items to a table. delete - Removes items from a table. dump - Displays a configuration script. help - Displays a list of commands. set - Sets configuration information. show - Displays information. To view help for a command, type the command, followed by a space, and then type ?.
Adds items to a table.
»netsh »ras »aaaa »add
C:\Windows>netsh ras aaaa add ? The following commands are available: Commands in this context: add acctserver - Adds a RADIUS accounting server. add authserver - Adds a RADIUS authentication server.
Adds a RADIUS accounting server.
»netsh »ras »aaaa »add »acctserver
C:\Windows>netsh ras aaaa add acctserver ? add acctserver [ name = ] server [ [secret =] secret [init-score =] InitialScore [port =] port [timeout = ] timeout [messages = ] ENABLED|DISABLED ] Provides an IP address or name of a RADIUS server to use for accounting. name The DNS name or IP address of the RADIUS server secret The shared secret init-score Initial score (server priority) port Sets the port on which to send the authentication requests. timeout The timeout period before the RADIUS server is marked unavailable (seconds) messages Whether to send accounting on/off messages.
Adds a RADIUS authentication server.
»netsh »ras »aaaa »add »authserver
C:\Windows>netsh ras aaaa add authserver ? add authserver [ name = ] server [ [secret =] secret [init-score =] InitialScore [port =] port [timeout =] timeout [signature = ] ENABLED|DISABLED ] Provides an IP address or name of a RADIUS server to pass authentication requests. name The DNS name or IP address of the RADIUS server secret The shared secret init-score Initial score (server priority) port Sets the port on which to send the authentication requests. timeout The timeout period before the RADIUS server is marked unavailable (seconds) signature Whether to use Message Authenticator
Removes items from a table.
»netsh »ras »aaaa »delete
C:\Windows>netsh ras aaaa delete ? The following commands are available: Commands in this context: delete acctserver - Deletes a RADIUS accounting server. delete authserver - Deletes a RADIUS server.
Deletes a RADIUS accounting server.
»netsh »ras »aaaa »delete »acctserver
C:\Windows>netsh ras aaaa delete acctserver ? delete acctserver [name = ] server Deletes a RADIUS accounting server.
Deletes a RADIUS server.
»netsh »ras »aaaa »delete »authserver
C:\Windows>netsh ras aaaa delete authserver ? delete authserver [name = ] server Deletes a RADIUS authentication server.
Displays a configuration script.
»netsh »ras »aaaa »dump
C:\Windows>netsh ras aaaa dump ? Usage: dump Remarks: Creates a script that contains the current configuration. If saved to a file, this script can be used to restore altered configuration settings.
Displays a list of commands.
»netsh »ras »aaaa »help
C:\Windows>netsh ras aaaa help ? Usage: help Remarks: Displays a list of commands.
Sets configuration information.
»netsh »ras »aaaa »set
C:\Windows>netsh ras aaaa set ? The following commands are available: Commands in this context: set accounting - Sets the accounting provider. set acctserver - Sets properties of an accounting server. set authentication - Sets the authentication provider. set authserver - Sets properties of an authentication server. set ipsecpolicy - Sets the IPsec policy for L2TP connection.
Sets the accounting provider.
»netsh »ras »aaaa »set »accounting
C:\Windows>netsh ras aaaa set accounting ? set accounting [provider =] WINDOWS|RADIUS|NONE Sets the accounting provider. windows Windows security should perform accounting. radius A RADIUS server should perform accounting. none Do not perform accounting.
Sets properties of an accounting server.
»netsh »ras »aaaa »set »acctserver
C:\Windows>netsh ras aaaa set acctserver ? set acctserver [ name = ] server [ [secret =] secret [init-score =] InitialScore [port =] port [timeout = ] timeout [messages = ] ENABLED|DISABLED ] Provides an IP address or name of a RADIUS server to use for accounting. name The DNS name or IP address of the RADIUS server secret The shared secret init-score Initial score (server priority) port Sets the port on which to send the authentication requests. timeout The timeout period before the RADIUS server is marked unavailable (seconds) messages Whether to send accounting on/off messages.
Sets the authentication provider.
»netsh »ras »aaaa »set »authentication
C:\Windows>netsh ras aaaa set authentication ? set authentication [provider =] WINDOWS|RADIUS Sets the authentication provider. windows Windows security should perform authentication. radius A RADIUS server should perform authentication.
Sets properties of an authentication server.
»netsh »ras »aaaa »set »authserver
C:\Windows>netsh ras aaaa set authserver ? set authserver [ name = ] server [ [secret =] secret [init-score =] InitialScore [port =] port [timeout =] timeout [signature = ] ENABLED|DISABLED ] Provides an IP address or name of a RADIUS server to pass authentication requests. name The DNS name or IP address of the RADIUS server secret The shared secret init-score Initial score (server priority) port Sets the port on which to send the authentication requests. timeout The timeout period before the RADIUS server is marked unavailable (seconds) signature Whether to use Message Authenticator
Sets the IPsec policy for L2TP connection.
»netsh »ras »aaaa »set »ipsecpolicy
C:\Windows>netsh ras aaaa set ipsecpolicy ? set ipsecpolicy [psk=] ENABLED | DISABLED [secret =] <Pre shared key> Sets the IPsec policy for L2TP connection. psk - Specifies whether a L2TP connection can use a Custom IPsec policy ENABLED - Custom IPsec policy using pre-shared keys DISABLED - Certificate Authority Policy. secret - The pre-shared key to be used with custom IPsec policy.
Displays information.
»netsh »ras »aaaa »show
C:\Windows>netsh ras aaaa show ? The following commands are available: Commands in this context: show accounting - Displays the current accounting provider. show acctserver - Displays the RADIUS server(s) used for accounting. show authentication - Displays the current authentication provider. show authserver - Displays the RADIUS server(s) used for authentication. show ipsecpolicy - Shows the IPsec policy for L2TP connection.
Displays the current accounting provider.
»netsh »ras »aaaa »show »accounting
C:\Windows>netsh ras aaaa show accounting ? show accounting Displays the accounting provider
Displays the RADIUS server(s) used for accounting.
»netsh »ras »aaaa »show »acctserver
C:\Windows>netsh ras aaaa show acctserver ? show acctserver [ [name = ] server ] Displays detailed information about an accounting server. name The DNS name or IP address of the RADIUS server If no server name is provided, all configured accounting servers will be displayed.
Displays the current authentication provider.
»netsh »ras »aaaa »show »authentication
C:\Windows>netsh ras aaaa show authentication ? show authentication Displays the authentication provider
Displays the RADIUS server(s) used for authentication.
»netsh »ras »aaaa »show »authserver
C:\Windows>netsh ras aaaa show authserver ? show authserver [ [name = ] server ] Displays detailed information about an authentication server. name The DNS name or IP address of the RADIUS server If no server name is provided, all configured authentication servers will be displayed.
Shows the IPsec policy for L2TP connection.
»netsh »ras »aaaa »show »ipsecpolicy
C:\Windows>netsh ras aaaa show ipsecpolicy ? show ipsecpolicy Shows the IPsec policy for L2TP connection.
Adds items to a table.
»netsh »ras »add
C:\Windows>netsh ras add ? The following commands are available: Commands in this context: add authtype - Adds types of authentication the Remote Access server will negotiate. add link - Adds to the list of link properties PPP will negotiate add multilink - Adds to the list of multilink types PPP will negotiate add registeredserver - Registers the given Windows computer as a Remote Access server in the Active Directory of the given domain.
Adds types of authentication the Remote Access server will negotiate.
»netsh »ras »add »authtype
C:\Windows>netsh ras add authtype ? add authtype [type = ] PAP|MD5CHAP|MSCHAPv2|EAP|CERT Selects the types of authentication which this Remote Access server will attempt to negotiate. Negotiation will be in the order most-secure to least-secure. Once both client and server agree upon an authentication type, the PPP negotiation will follow the appropriate RFCs. type - the type PAP - Password Authentication Protocol (clear text). MD5CHAP - Challenge Handshake Authentication Protocol using Message Digest 5 hashing scheme to encrypt the response. MSCHAPv2 - Version 2 of MSCHAP. EAP - Extensible Authentication Protocol. CERT - Certificate Authentication for IKEv2.
Adds to the list of link properties PPP will negotiate
»netsh »ras »add »link
C:\Windows>netsh ras add link ? add link [type = ] SWC|LCP Adds to the list of link properties PPP will negotiate. type - the type SWC - Provides software compression (MPPC) LCP - Provides Link Control Protocol extensions from the PPP suite of protocols.
Adds to the list of multilink types PPP will negotiate
»netsh »ras »add »multilink
C:\Windows>netsh ras add multilink ? add multilink [type = ] MULTI|BACP Adds to the list of multilink types PPP will negotiate. type - the type MULTI - Provides multilink PPP sessions. BACP - Provides Bandwidth Allocation Control Protocol.
Registers the given Windows computer as a
»netsh »ras »add »registeredserver
C:\Windows>netsh ras add registeredserver ? add registeredserver [ [domain = ] domain [server = ] server ] Registers the given Windows computer as a Remote Access server in the Active Directory of the given domain. server - the computer name of the computer to be registered as a Remote Access server. If no server is specified the computer from which the command is issued is assumed. domain - the domain in which the given server should be registered. If no domain is provided, the primary domain of the computer from which the command is issued is assumed.
Removes items from a table.
»netsh »ras »delete
C:\Windows>netsh ras delete ? The following commands are available: Commands in this context: delete authtype - Deletes an authentication type from the Remote Access server. delete link - Deletes from the list of link properties PPP will negotiate delete multilink - Deletes from the list of multilink types PPP will negotiate delete registeredserver - Un-registers the given Windows computer as a Remote Access server in the Active Directory of the given domain.
Deletes an authentication type from the Remote Access server.
»netsh »ras »delete »authtype
C:\Windows>netsh ras delete authtype ? delete authtype [type = ] PAP|MD5CHAP|MSCHAPv2|EAP|CERT Deletes an authentication type from the list of types that the Remote Access server will negotiate. type - the type PAP - Password Authentication Protocol (clear text). MD5CHAP - Challenge Handshake Authentication Protocol using Message Digest 5 hashing scheme to encrypt the response. MSCHAPv2 - Version 2 of MSCHAP. EAP - Extensible Authentication Protocol. CERT - Certificate Authentication for IKEv2.
Deletes from the list of link properties PPP will negotiate
»netsh »ras »delete »link
C:\Windows>netsh ras delete link ? delete link [type = ] SWC|LCP Deletes from the list of link properties PPP will negotiate. type - the type SWC - Provides software compression (MPPC) LCP - Provides Link Control Protocol extensions from the PPP suite of protocols.
Deletes from the list of multilink types PPP will negotiate
»netsh »ras »delete »multilink
C:\Windows>netsh ras delete multilink ? delete multilink [type = ] MULTI|BACP Deletes from the list of multilink types PPP will negotiate. type - the type MULTI - Provides multilink PPP sessions. BACP - Provides Bandwidth Allocation Control Protocol.
Un-registers the given Windows computer as a
»netsh »ras »delete »registeredserver
C:\Windows>netsh ras delete registeredserver ? delete registeredserver [ [domain = ] domain [server = ] server ] Un-registers the given Windows computer as a Remote Access server in the Active Directory of the given domain. server - the computer name of the computer to be unregistered as a Remote Access server. If no server is specified the computer from which the command is issued is assumed. domain - the domain in which the given server should be unregistered. If no domain is provided, the primary domain of the computer from which the command is issued is assumed.
Changes to the `netsh ras diagnostics' context.
»netsh »ras »diagnostics
C:\Windows>netsh ras diagnostics ? The following commands are available: Commands in this context: ? - Displays a list of commands. dump - Displays a configuration script. help - Displays a list of commands. set - Sets configuration information. show - Displays information. To view help for a command, type the command, followed by a space, and then type ?.
Displays a configuration script.
»netsh »ras »diagnostics »dump
C:\Windows>netsh ras diagnostics dump ? Usage: dump Remarks: Creates a script that contains the current configuration. If saved to a file, this script can be used to restore altered configuration settings.
Displays a list of commands.
»netsh »ras »diagnostics »help
C:\Windows>netsh ras diagnostics help ? Usage: help Remarks: Displays a list of commands.
Sets configuration information.
»netsh »ras »diagnostics »set
C:\Windows>netsh ras diagnostics set ? The following commands are available: Commands in this context: set cmtracing - Enables/disables Connection Manager logging. set loglevel - Sets the global Log level for RRAS set modemtracing - Enables or disables tracing of modem settings and messages during a network connection. set rastracing - Enables/disables extended tracing for a component. set securityeventlog - Enables or disables Security Event logging. You can view Security Event logs using Event Viewer. set tracefacilities - Enables/disables extended tracing for all components.
Enables/disables Connection Manager logging.
»netsh »ras »diagnostics »set »cmtracing
C:\Windows>netsh ras diagnostics set cmtracing ? set cmtracing [ state = ] ENABLED|DISABLED Enables or disables logging for Connection Manager service profiles. state - tracing state for Connection Manager service profiles. ENABLED - Enables logging for Connection Manager service profiles. DISABLED - Disables logging for Connection Manager service profiles.
Sets the global Log level for RRAS
»netsh »ras »diagnostics »set »loglevel
C:\Windows>netsh ras diagnostics set loglevel ? set loglevel [events=] error | warn | all | none Sets the global Log level for Routing and Remote Access Service events - Events to log into the System Log in Event Viewer none - Specifies that no event is logged error - Specifies that only errors are logged warn - Specifies that errors and warnings are logged all - Specifies to log all events.
Enables or disables tracing of modem settings and messages during a network connection.
»netsh »ras »diagnostics »set »modemtracing
C:\Windows>netsh ras diagnostics set modemtracing ? set modemtracing [ state = ] ENABLED|DISABLED Enables or disables tracing of modem settings and messages during a network connection. state - tracing state of modem ENABLED - Enables modem tracing for all network connections that use a modem. DISABLED - Disables modem tracing for all network connections that use a modem.
Enables/disables extended tracing for a component.
»netsh »ras »diagnostics »set »rastracing
C:\Windows>netsh ras diagnostics set rastracing ? set rastracing [component = ] component [state = ] ENABLED|DISABLED Enables or disables extended tracing for the given component. component - the component (use '*' to denote all components)
Enables or disables Security Event logging. You can view Security Event logs using Event Viewer.
»netsh »ras »diagnostics »set »securityeventlog
C:\Windows>netsh ras diagnostics set securityeventlog ? set securityeventlog [ state = ] ENABLED|DISABLED Enables or disables Security Event logging. You can view Security Event logs using Event Viewer. state - tracing state of security events ENABLED - Enables logging of Security Events for all network connections. DISABLED - Disables logging of Security Events for all network connections.
Enables/disables extended tracing for all components.
»netsh »ras »diagnostics »set »tracefacilities
C:\Windows>netsh ras diagnostics set tracefacilities ? set tracefacilities [ state = ] ENABLED|DISABLED|CLEAR Enables, disables, or clears extended tracing logs for all network connections. state - - tracing state of the RAS components ENABLED - Enables all available logging functions for all network connections. DISABLED - Disables all available logging functions for all network connections. CLEAR - Clears all extended tracing log files.
Displays information.
»netsh »ras »diagnostics »show
C:\Windows>netsh ras diagnostics show ? The following commands are available: Commands in this context: show all - Shows Remote Access Diag Report. show cmtracing - Shows whether Connection Manager logging is enabled. show configuration - Configuration Info. show installation - Installation Info. show loglevel - Shows the global Log level for RRAS show logs - Shows all logs. show modemtracing - Shows whether tracing of modem settings and messages during a network connection is enabled. show rastracing - Shows whether extended tracing is enabled for components. show securityeventlog - Shows whether Security Event Logs are enabled. show tracefacilities - Shows whether extended tracing is enabled for all components.
Shows Remote Access Diag Report.
»netsh »ras »diagnostics »show »all
C:\Windows>netsh ras diagnostics show all ? show all [ type = ] FILE|EMAIL [ destination = ] destination [ [ compression = ] ENABLED|DISABLED [ hours = ] hours [ verbose = ] ENABLED|DISABLED ] Shows the entire Remote Access Diagnostic Report. type - type of destination. FILE - save the diagnostic report to a file. EMAIL - send the diagnostic report to an email address. destination - the destination for the diagnostic report. Either a filename or an email address is a valid destination. compression - compress the diagnostic report into a CAB file. ENABLED - enables compression. Default setting for email destination. DISABLED - disables compression. Default setting for file destination. hours - only show log entries from this number of hours in the past. 1 - 24 is valid. If no time is specified, the entire log will be displayed. verbose - Amount of data to include in the diagnostic report. ENABLED - enables verbose information. DISABLED - disables verbose information. Default.
Shows whether Connection Manager logging is enabled.
»netsh »ras »diagnostics »show »cmtracing
C:\Windows>netsh ras diagnostics show cmtracing ? Usage: show cmtracing Shows whether Connection Manager logging is enabled.
Configuration Info.
»netsh »ras »diagnostics »show »configuration
C:\Windows>netsh ras diagnostics show configuration ? show configuration [ type = ] FILE|EMAIL [ destination = ] destination [ [ compression = ] ENABLED|DISABLED [ hours = ] hours [ verbose = ] ENABLED|DISABLED ] Configuration Info. type - type of destination. FILE - save the diagnostic report to a file. EMAIL - send the diagnostic report to an email address. destination - the destination for the diagnostic report. Either a filename or an email address is a valid destination. compression - compress the diagnostic report into a CAB file. ENABLED - enables compression. Default setting for email destination. DISABLED - disables compression. Default setting for file destination. hours - only show log entries from this number of hours in the past. 1 - 24 is valid. If no time is specified, the entire log will be displayed. verbose - Amount of data to include in the diagnostic report. ENABLED - enables verbose information. DISABLED - disables verbose information. Default.
Installation Info.
»netsh »ras »diagnostics »show »installation
C:\Windows>netsh ras diagnostics show installation ? show installation [ type = ] FILE|EMAIL [ destination = ] destination [ [ compression = ] ENABLED|DISABLED [ hours = ] hours [ verbose = ] ENABLED|DISABLED ] Installation Info. type - type of destination. FILE - save the diagnostic report to a file. EMAIL - send the diagnostic report to an email address. destination - the destination for the diagnostic report. Either a filename or an email address is a valid destination. compression - compress the diagnostic report into a CAB file. ENABLED - enables compression. Default setting for email destination. DISABLED - disables compression. Default setting for file destination. hours - only show log entries from this number of hours in the past. 1 - 24 is valid. If no time is specified, the entire log will be displayed. verbose - Amount of data to include in the diagnostic report. ENABLED - enables verbose information. DISABLED - disables verbose information. Default.
Shows the global Log level for RRAS
»netsh »ras »diagnostics »show »loglevel
C:\Windows>netsh ras diagnostics show loglevel ? show loglevel Shows the global Log level for Routing and Remote Access Service
Shows all logs.
»netsh »ras »diagnostics »show »logs
C:\Windows>netsh ras diagnostics show logs ? show logs [ type = ] FILE|EMAIL [ destination = ] destination [ [ compression = ] ENABLED|DISABLED [ hours = ] hours [ verbose = ] ENABLED|DISABLED ] Shows all logs. type - type of destination. FILE - save the diagnostic report to a file. EMAIL - send the diagnostic report to an email address. destination - the destination for the diagnostic report. Either a filename or an email address is a valid destination. compression - compress the diagnostic report into a CAB file. ENABLED - enables compression. Default setting for email destination. DISABLED - disables compression. Default setting for file destination. hours - only show log entries from this number of hours in the past. 1 - 24 is valid. If no time is specified, the entire log will be displayed. verbose - Amount of data to include in the diagnostic report. ENABLED - enables verbose information. DISABLED - disables verbose information. Default.
Shows whether tracing of modem settings and messages during a network connection is enabled.
»netsh »ras »diagnostics »show »modemtracing
C:\Windows>netsh ras diagnostics show modemtracing ? Usage: show modemtracing Shows whether tracing of modem settings and messages during a network connection is enabled.
Shows whether extended tracing is enabled for components.
»netsh »ras »diagnostics »show »rastracing
C:\Windows>netsh ras diagnostics show rastracing ? show rastracing [ [component = ] component ] Shows whether tracing for the given component is enabled. If no component is specified, shows the state of all components. component - the component
Shows whether Security Event Logs are enabled.
»netsh »ras »diagnostics »show »securityeventlog
C:\Windows>netsh ras diagnostics show securityeventlog ? Usage: show securityeventlog Shows whether logging of Security Events is enabled.
Shows whether extended tracing is enabled for all components.
»netsh »ras »diagnostics »show »tracefacilities
C:\Windows>netsh ras diagnostics show tracefacilities ? Usage: show tracefacilities Shows whether extended tracing is enabled for all components.
Displays a configuration script.
»netsh »ras »dump
C:\Windows>netsh ras dump ? Usage: dump Remarks: Creates a script that contains the current configuration. If saved to a file, this script can be used to restore altered configuration settings.
Displays a list of commands.
»netsh »ras »help
C:\Windows>netsh ras help ? Usage: help Remarks: Displays a list of commands.
Changes to the `netsh ras ip' context.
»netsh »ras »ip
C:\Windows>netsh ras ip ? The following commands are available: Commands in this context: ? - Displays a list of commands. add - Adds items to a table. delete - Removes items from a table. dump - Displays a configuration script. help - Displays a list of commands. set - Sets configuration information. show - Displays information. To view help for a command, type the command, followed by a space, and then type ?.
Adds items to a table.
»netsh »ras »ip »add
C:\Windows>netsh ras ip add ? The following commands are available: Commands in this context: add range - Adds a range to the static IP address pool.
Adds a range to the static IP address pool.
»netsh »ras »ip »add »range
C:\Windows>netsh ras ip add range ? add range [from = ] from [to = ] to Adds a range to the static IP address pool that the Remote Access server uses. from - the starting IP address in the range in the form 'x.x.x.x' to - the ending IP address in the range in the form 'x.x.x.x'
Removes items from a table.
»netsh »ras »ip »delete
C:\Windows>netsh ras ip delete ? The following commands are available: Commands in this context: delete pool - Deletes all ranges from the static IP address pool. delete range - Deletes a range from the static IP address pool.
Deletes all ranges from the static IP address pool.
»netsh »ras »ip »delete »pool
C:\Windows>netsh ras ip delete pool ? delete pool Deletes all ranges from the static IP address pool.
Deletes a range from the static IP address pool.
»netsh »ras »ip »delete »range
C:\Windows>netsh ras ip delete range ? delete range [from = ] from [to = ] to Deletes a range from the static IP address pool that the Remote Access server uses. from - the starting IP address in the range in the form 'x.x.x.x' to - the ending IP address in the range in the form 'x.x.x.x'
Displays a configuration script.
»netsh »ras »ip »dump
C:\Windows>netsh ras ip dump ? Usage: dump Remarks: Creates a script that contains the current configuration. If saved to a file, this script can be used to restore altered configuration settings.
Displays a list of commands.
»netsh »ras »ip »help
C:\Windows>netsh ras ip help ? Usage: help Remarks: Displays a list of commands.
Sets configuration information.
»netsh »ras »ip »set
C:\Windows>netsh ras ip set ? The following commands are available: Commands in this context: set access - Sets whether clients are given access beyond the remote access server. set addrassign - Sets the method by which the Remote Access server assigns IP addresses to its clients. set addrreq - Sets whether clients can request their own IP addresses. set broadcastnameresolution - Sets whether to enable or disable broadcast name resolution using NetBIOS over TCP/IP. set negotiation - Sets whether IP is negotiated for client Remote Access connections. set preferredadapter - Specifies the preferred adapter for Routing and Remote Access Service.
Sets whether clients are given access beyond the remote
»netsh »ras »ip »set »access
C:\Windows>netsh ras ip set access ? Usage: set access [mode = ] ALL|SERVERONLY Parameters: mode - what type of access to grant ALL - clients are able to reach the remote access server and any networks to which it is connected. SERVERONLY - clients are able to reach the remote access server only. Remarks: Specifies whether IP network traffic from any client is forwarded to the network(s) to which the remote access server is connected.
Sets the method by which the Remote Access server
»netsh »ras »ip »set »addrassign
C:\Windows>netsh ras ip set addrassign ? set addrassign [method = ] AUTO|POOL Sets the method by which the Remote Access server assigns IP addresses to its clients. method - the method to use AUTO - automatically assigns IP addresses using DHCP. If no DHCP server is available, a random, private address is assigned. POOL - assigns IP address from the Remote Access server's pool.
Sets whether clients can request their own IP addresses.
»netsh »ras »ip »set »addrreq
C:\Windows>netsh ras ip set addrreq ? set addrreq [mode = ] ALLOW|DENY Specifies whether dialin clients are permitted to request their own IP addresses. mode - the mode ALLOW - allow clients to request their own IP addresses. DENY - don't allow clients to request their own IP addresses.
Sets whether to enable or disable broadcast
»netsh »ras »ip »set »broadcastnameresolution
C:\Windows>netsh ras ip set broadcastnameresolution ? set broadcastnameresolution [mode = ] ENABLED|DISABLED Specifies whether to enable or disable broadcast name resolution using NetBIOS over TCP/IP. mode - the mode ENABLED - enables broadcast name resolution using NetBIOS over TCP/IP. DISABLED - disables broadcast name resolution using NetBIOS over TCP/IP.
Sets whether IP is negotiated for client Remote Access connections.
»netsh »ras »ip »set »negotiation
C:\Windows>netsh ras ip set negotiation ? set negotiation [mode = ] ALLOW|DENY Specifies whether the Remote Access server will allow IP to be configured for any client connections it accepts. mode - the mode ALLOW - permit IP over client connections. DENY - do not permit IP over client connections.
Specifies the preferred adapter for Routing and Remote
»netsh »ras »ip »set »preferredadapter
C:\Windows>netsh ras ip set preferredadapter ? set preferredadapter[[name=] <interface_name> ] Specifies the preferred adapter for Routing and Remote Access Service name - name of the adapter in quoted string <interface_name> - Specifies that the adapter interface_name to be used to obtain the IP address for the allocation (If Configured to use DHCP) and the IP address of DHCP and WINS server for assignment to remote access clients and demand dial uses. No Argument - Default auto select setting. Specifies that RAS to select an adapter at random when Routing and Remote Access Service is started
Displays information.
»netsh »ras »ip »show
C:\Windows>netsh ras ip show ? The following commands are available: Commands in this context: show config - Displays current Remote Access IP configuration. show preferredadapter - Shows the preferred adapter for Routing and Remote Access Service.
Displays current Remote Access IP configuration.
»netsh »ras »ip »show »config
C:\Windows>netsh ras ip show config ? show config Displays current Remote Access IP configuration.
Shows the preferred adapter for Routing and Remote
»netsh »ras »ip »show »preferredadapter
C:\Windows>netsh ras ip show preferredadapter ? show preferredadapter Shows the preferred adapter for Routing and Remote Access Service
Changes to the `netsh ras ipv6' context.
»netsh »ras »ipv6
C:\Windows>netsh ras ipv6 ? The following commands are available: Commands in this context: ? - Displays a list of commands. dump - Displays a configuration script. help - Displays a list of commands. set - Sets configuration information. show - Displays information. To view help for a command, type the command, followed by a space, and then type ?.
Displays a configuration script.
»netsh »ras »ipv6 »dump
C:\Windows>netsh ras ipv6 dump ? Usage: dump Remarks: Creates a script that contains the current configuration. If saved to a file, this script can be used to restore altered configuration settings.
Displays a list of commands.
»netsh »ras »ipv6 »help
C:\Windows>netsh ras ipv6 help ? Usage: help Remarks: Displays a list of commands.
Sets configuration information.
»netsh »ras »ipv6 »set
C:\Windows>netsh ras ipv6 set ? The following commands are available: Commands in this context: set access - Sets whether clients are given access beyond the remote access server. set negotiation - Sets whether IPv6 is negotiated for client Remote Access connections. set prefix - Sets the prefix that RAS server uses. set routeradvertise - Configure the Router Advertisement option for IPv6 for the remote access server.
Sets whether clients are given access beyond the remote
»netsh »ras »ipv6 »set »access
C:\Windows>netsh ras ipv6 set access ? Usage: set access [mode = ] ALL|SERVERONLY Parameters: mode - what type of access to grant ALL - clients are able to reach the remote access server and any networks to which it is connected. SERVERONLY - clients are able to reach the remote access server only. Remarks: Specifies whether IPv6 network traffic from any client is forwarded to the network(s) to which the remote access server is connected.
Sets whether IPv6 is negotiated for client Remote Access connections.
»netsh »ras »ipv6 »set »negotiation
C:\Windows>netsh ras ipv6 set negotiation ? set negotiation [mode = ] ALLOW|DENY Specifies whether the Remote Access server will allow IPv6 to be configured for any client connections it accepts. mode - the mode ALLOW - permit IPv6 over client connections. DENY - do not permit IPv6 over client connections.
Sets the prefix that RAS server uses.
»netsh »ras »ipv6 »set »prefix
C:\Windows>netsh ras ipv6 set prefix ? set prefix [ prefix= ] <IPv6 Prefix> Sets the static IPv6 prefix that the Remote Access server uses to advertise to the clients. <IPv6 Prefix> - the IPv6 prefix in the form 'x:x:x:x::'
Configure the Router Advertisement option for IPv6 for
»netsh »ras »ipv6 »set »routeradvertise
C:\Windows>netsh ras ipv6 set routeradvertise ? Usage: set routeradvertise [mode= ] ENABLE|DISABLE Parameters: mode - Specifies the mode for routeradvertise option on this server. ENABLE - Enable the routeradvertise option DISABLE - Disable the routeradvertisement option Remarks: A default route is a route for the zero-length prefix A computer that is being used as an IPv6 router will not advertise itself as a default router unless it is configured with a default route (::/0) that is configured to be published.
Displays information.
»netsh »ras »ipv6 »show
C:\Windows>netsh ras ipv6 show ? The following commands are available: Commands in this context: show config - Displays current Remote Access IPv6 configuration.
Displays current Remote Access IPv6 configuration.
»netsh »ras »ipv6 »show »config
C:\Windows>netsh ras ipv6 show config ? show config Displays current Remote Access IPv6 configuration.
Sets configuration information.
»netsh »ras »set
C:\Windows>netsh ras set ? The following commands are available: Commands in this context: set authmode - Sets the authentication mode. set client - Reset the statistics or disconnect a Remote Access Client. set conf - Sets the configuration state of the server. set ikev2connection - Sets the idle timeout and network outage time values for IKEv2 connections. set ikev2saexpiry - Sets the IKEv2 Security Association's expiration controls. set portstatus - Resets the statistics information of RAS ports. set sstp-ssl-cert - Sets the current SSTP Certificate configuration set type - Sets the Router and RAS functionalities of the computer. set user - Sets the Remote Access properties of a user. set wanports - Sets the RAS WAN ports options.
Sets the authentication mode.
»netsh »ras »set »authmode
C:\Windows>netsh ras set authmode ? set authmode [mode = ] STANDARD|NODCC|BYPASS Sets the mode that determines whether and when dialin clients should be authenticated. mode - The mode STANDARD - All devices need to be authenticated. NODCC - Direct-connect devices are not authenticated. BYPASS - Authentication is not required for any device.
Reset the statistics or disconnect a Remote Access Client.
»netsh »ras »set »client
C:\Windows>netsh ras set client ? set client [name=] <str_clientname> [state=] disconnect | resetstats name - The user name of the client to disconnect or reset statistics state - Action to perform disconnect - Disconnect the specified user resetstats - Reset the statistics for the specified user
Sets the configuration state of the server.
»netsh »ras »set »conf
C:\Windows>netsh ras set conf ? set conf [confstate=] ENABLED|DISABLED Sets the configuration state of the server. confstate - The new state of the server : ENABLED - Enable the server. DISABLED - Disable the server and remove configurations.
Sets the idle timeout and network outage time values for IKEv2 connections.
»netsh »ras »set »ikev2connection
C:\Windows>netsh ras set ikev2connection ? set ikev2connection [ [idletimeout=] <idle_timeout> ] [ [nwoutagetime=] <nw_outage_time> ] Sets the idle timeout and network outage time values for IKEv2 client connections. idletimeout - Specify the idle timeout in minutes for IKEv2 client connections. This value is used to disconnect IKEv2 connections in case the client machine is idle. (minimum - 5 mins,maximum - 2879 mins(less than 48 hours)) nwoutagetime - Specify the network outage time value in minutes for IKEv2 client connections.(minimum 2 minutes)
Sets the IKEv2 Security Association's expiration controls.
»netsh »ras »set »ikev2saexpiry
C:\Windows>netsh ras set ikev2saexpiry ? set ikev2saexpiry [ [saexpirytime=] <sa_expiry_time> ] [ [sadatasizelimit=] <sa_datasize_limit> ] Sets the IKEv2 Security Association's expiration controls. saexpirytime - Specify the SA expiry value in minutes for IKEv2 client connections. (minimum - 5 mins,maximum - 2879 mins(less than 48 hours)) sadatasizelimit - Specify the SA datasize limit in MB.(minimum 1 MB)
Resets the statistics information of RAS ports.
»netsh »ras »set »portstatus
C:\Windows>netsh ras set portstatus ? set portstatus [ [name=] <port_name> ] Resets the statistics information of RAS ports. name - Name of the port. If none specified, resets statistics of all active ports.
Sets the current SSTP Certificate configuration
»netsh »ras »set »sstp-ssl-cert
C:\Windows>netsh ras set sstp-ssl-cert ? set sstp-ssl-cert [[name=] certname] [[hash=] hash] Set the current SSTP Certificate configuration. name - Specify the certificate name which should be used by SSTP hash - Specify the SHA-1 hash of the certificate which should be used by SSTP Example: Below Command set the SSTP to use certificate named Verisign netsh ras>set sstp-ssl-cert name=VeriSign OR Below Cmmand reset the SSTP Certificate configuration to default netsh ras>set sstp-ssl-cert name=default OR Below Cmmand set the SSTP to used certificate whose hash is provided netsh ras>set sstp-ssl-cert hash=4463c531d7ccc1006794612bb656d3bf8257846f
Sets the Router and RAS functionalities of the computer.
»netsh »ras »set »type
C:\Windows>netsh ras set type ? set type [ipv4rtrtype=] lanonly | lananddd | none [ipv6rtrtype=] lanonly | lananddd | none [rastype=] IPv4 | IPv6 | BOTH | NONE Sets the Router and RAS functionalities of the computer. ipv4rtrtype - Whether this computer is configured as IPv4 Router. LANONLY - Specifies that this computer is a LAN - only router and does not require Demand Dial or VPN connections. LANANDDD - Specifies that this computer is a LAN and Demand Dial router and supports VPN connections. NONE - Specifies that this computer is not enabled as a IPv4 router. ipv6rtrtype - Whether this computer is configured as IPv6 Router. LANONLY - Specifies that this computer is a LAN - only router and does not require Demand Dial or VPN connections. LANANDDD - Specifies that this computer is a LAN and Demand Dial router and supports VPN connections. NONE - Specifies that this computer is not enabled as a IPv6 router. rastype - Whether this computer is configured as Remote Access Server. IPv4 - Configured for IPv4. IPv6 - Configured for IPv6. BOTH - Configured for both IPv4 and IPv6. NONE - Not configured as a Remote Access Server.
Sets the Remote Access properties of a user.
»netsh »ras »set »user
C:\Windows>netsh ras set user ? set user [name = ] username [dialin = ] PERMIT|DENY|POLICY [ [cbpolicy = ] NONE|CALLER|ADMIN [cbnumber = ] callback number ] Sets user Remote Access properties. username - the user's logon name. dialin - whether the user will be allowed to dial in PERMIT - allow the user to dial in. DENY - do not allow the user to dial in. POLICY - use remote access policies to determine dialin. cbpolicy - the callback policy of the user. The callback feature is used to save the caller the cost of the phone call. NONE - callback is not allowed for the user CALLER - user can specify callback number at call time ADMIN - always call the user at the callback number cbnumber - the number to use when cbpolicy is ADMIN NOTE: The 'POLICY' option is not available for users that belong to a mixed-mode domain. For these users, 'POLICY' is assumed to mean 'DENY'.
Sets the RAS WAN ports options.
»netsh »ras »set »wanports
C:\Windows>netsh ras set wanports ? set wanports [device=] <devicename> [ [rasinonly=] enabled | disabled ] [ [ddinout=] enabled | disabled ] [ [ddoutonly=] enabled | disabled ] [ [phone=] <phonenumber> ] [ [maxports=] <numports> ] Sets the RAS WAN ports options. device - The device name of the port rasinonly - Inbound remote access connection ddinout - Demand dial in/outbound routing connection ddoutonly - Demand dial outbound routing connection phone - Phone number for the device. This will be a string taking phone number or VPI/VCI or IP address value maxports - Maximum number of ports for the device Example: netsh>ras set wanports device="WAN Miniport (PPTP)" rasinonly = enabled ddinout = enabled ddoutonly = disabled phone ="33525552" maxports=20 netsh>ras set wanports device="Standard 56000 bps Modem" rasinonly = disabled ddinout = enabled ddoutonly = disabled phone="9140559676"
Displays information.
»netsh »ras »show
C:\Windows>netsh ras show ? The following commands are available: Commands in this context: show activeservers - Listens for Remote Access server advertisements. show authmode - Shows the authentication mode. show authtype - Displays the authentication types currently enabled. show client - Shows Remote Access clients connected to this machine and their status. show conf - Shows the configuration state of the server. show ikev2connection - Shows the idle timeout and network outage time values for IKEv2 connections. show ikev2saexpiry - Shows the IKEv2 Security Association's expiration controls. show link - Shows the link properties PPP will negotiate show multilink - Shows the multilink types PPP will negotiate show portstatus - Shows the current status of RAS ports. show registeredserver - Displays whether a computer is registered as a Remote Access server in the Active Directory of the given domain. show sstp-ssl-cert - Shows the current SSTP Certificate configuration show status - Shows the status of the Routing and Remote Access Server. show type - Shows the Router and RAS functionalities of the computer. show user - Displays Remote Access properties for a user(s). show wanports - Shows the options set for RAS WAN ports.
Listens for Remote Access server advertisements.
»netsh »ras »show »activeservers
C:\Windows>netsh ras show activeservers ? show activeservers Listens for Remote Access server advertisements.
Shows the authentication mode.
»netsh »ras »show »authmode
C:\Windows>netsh ras show authmode ? show authmode Shows the authentication mode.
Displays the authentication types currently enabled.
»netsh »ras »show »authtype
C:\Windows>netsh ras show authtype ? show authtype Displays the authentication type(s) currently enabled.
Shows Remote Access clients connected to this machine
»netsh »ras »show »client
C:\Windows>netsh ras show client ? show client [[name=]<str_clientname>] Shows Remote Access clients connected to this machine or their status. Parameters None - Shows Remote Access clients connected to this machine. name - Shows the status of a given client connected to the machine. If this parameter is "*" , enumerates status of all clients.
Shows the configuration state of the server.
»netsh »ras »show »conf
C:\Windows>netsh ras show conf ? show conf Shows the configuration state of the server.
Shows the idle timeout and network outage time values for IKEv2 connections.
»netsh »ras »show »ikev2connection
C:\Windows>netsh ras show ikev2connection ? Shows the idle timeout and network outage time values for IKEv2 client connections. idletimeout - Shows the idle timeout in minutes for IKEv2 client connections. This value is used to disconnect IKEv2 connections in case the client machine is idle. nwoutagetime - Shows the network outage time value in minutes for IKEv2 client connections.
Shows the IKEv2 Security Association's expiration controls.
»netsh »ras »show »ikev2saexpiry
C:\Windows>netsh ras show ikev2saexpiry ? Shows the IKEv2 Security Association's expiration controls. saexpirytime - Shows the SA expiry value in minutes for IKEv2 client connections. sadatasizelimit - Shows the SA datasize limit in MB.
Shows the link properties PPP will negotiate
»netsh »ras »show »link
C:\Windows>netsh ras show link ? show link Shows the link properties PPP will negotiate.
Shows the multilink types PPP will negotiate
»netsh »ras »show »multilink
C:\Windows>netsh ras show multilink ? show multilink Shows the multilink types PPP will negotiate.
Shows the current status of RAS ports.
»netsh »ras »show »portstatus
C:\Windows>netsh ras show portstatus ? show portstatus [ name=<port_name> ] [ state=<enum> ] Shows the current status of RAS ports. name - Name of the port whose status to display state - Display ports with the specified state : nonoperational - Non operational ports disconnected - Disconnected ports callingback - Ports calling back listening - Ports listening authenticating - Ports authenticating connected - Authenticated and connected ports initializing - Ports initializing Example: netsh ras> show portstatus name=VPN0-127 netsh ras> show portstatus state=connected \
Displays whether a computer is registered as a
»netsh »ras »show »registeredserver
C:\Windows>netsh ras show registeredserver ? show registeredserver [ [domain = ] domain [server = ] server ] Displays whether the given computer is registered as a Remote Access server in the given domain. server - the computer name of the computer in question. If no server is specified the computer from which the command is issued is assumed. domain - the domain. If no domain is provided, the primary domain of the computer from which the command is issued is assumed.
Shows the current SSTP Certificate configuration
»netsh »ras »show »sstp-ssl-cert
C:\Windows>netsh ras show sstp-ssl-cert ? Shows the current SSTP Certificate configuration Friendly name - Certificate Friendly name Display name - Display Friendly name Issuer - Certificate is issued by this authority Expiry timestamp - Certificate is valid till this timestamp
Shows the status of the Routing and Remote Access Server.
»netsh »ras »show »status
C:\Windows>netsh ras show status ? show status Shows the status of a Routing and Remote Access Server
Shows the Router and RAS functionalities of the computer.
»netsh »ras »show »type
C:\Windows>netsh ras show type ? show type\ Shows the Router and RAS functionalities of the computer.
Displays Remote Access properties for a user(s).
»netsh »ras »show »user
C:\Windows>netsh ras show user ? show user [ [name = ] username [mode = ] PERMIT|REPORT ] Displays user Remote Access properties. username - the user's logon name. If none is supplied, all users will be displayed. mode - the mode for showing information. If no mode is specified, REPORT is assumed. REPORT - show all users. PERMIT - show only users whose dial in permission is PERMIT
Shows the options set for RAS WAN ports.
»netsh »ras »show »wanports
C:\Windows>netsh ras show wanports ? show wanports [ [device=] <devicename> ] Shows the options set for a RAS WAN port. devicename - The device name of the port Example: netsh ras> show wanports netsh ras> show wanports device="WAN Miniport (PPTP)"
- cn -/- de -/- en -