Microsoft Windows [Version 6.1.7000] (C) Copyright 2009 Microsoft Corp. C:\Windows>netsh ipsec dynamic add qmpolicy ?
Usage:
qmpolicy [ name = ][[ soft = ] (yes | no) ][[ pfsgroup = ] (GRP1 | GRP2 | GRP3 | GRPMM | NOPFS) ][[ qmsecmethods = ] (neg#1 neg#2 ... neg#n) ]
Adds a quick mode policy to SPD.
Parameters:
Tag Value
name -Name of the quick mode policy.
soft -Allow unsecured communication with non-IPsec-aware
computers.
This takes a value of either 'yes' or 'no'.
pfsgroup -GRP1,GRP2,GRP3,GRPMM,NOPFS(default).
qmsecmethods -IPsec offer in one of the following formats:
ESP[ConfAlg,AuthAlg]:k/s
AH[HashAlg]:k/s
AH[HashAlg]+ESP[ConfAlg,AuthAlg]:k/s
where ConfAlg can be DES or 3DES or None.
where AuthAlg can be MD5 or SHA1 or None.
where HashAlg is MD5 or SHA1.
where k is lifetime in kilobytes.
where s is lifetime in seconds.
Remarks: The use of DES and MD5 is not recommended. These cryptographic
algorithms are provided for backward compatibility only.
Examples: add qmpolicy name=qmp
qmsec="AH[MD5]:10000k/24800s ESP[DES,SHA1]:30000k/300s"
