Microsoft Windows [Version 6.1.7000] (C) Copyright 2009 Microsoft Corp. C:\Windows>netsh ipsec dynamic set qmpolicy ?
Usage:
qmpolicy [ name = ][[ soft = ] (yes | no) ][[ pfsgroup = ] (GRP1 | GRP2 | GRP3 | GRPMM | NOPFS) ][[ qmsecmethods = ] (neg#1 neg#2 ... neg#n) ]
Modifies a quick mode policy in SPD.
Parameters:
Tag Value
name -Name of the quick mode policy.
soft -Allow unsecured communication with
non-IPsec-aware computers.
This takes a value of either 'yes' or 'no'.
pfsgroup -GRP1,GRP2,GRP3,GRPMM,NOPFS(default).
qmsecmethods -IPsec offer in one of the following formats:
ESP[ConfAlg,AuthAlg]:k/s
AH[HashAlg]:k/s
AH[HashAlg]+ESP[ConfAlg,AuthAlg]:k/s
where ConfAlg can be DES, or 3DES or None.
where AuthAlg can be MD5, or SHA1 or None.
where HashAlg is MD5 or SHA1.
where k is lifetime in kilobytes.
where s is lifetime in seconds.
Remarks: The use of DES and MD5 is not recommended. These cryptographic
algorithms are provided for backward compatibility only.
Example: set qmpolicy name=qmp pfsg=grp3
qmsec="AH[MD5]:100000k/29999s+ESP[DES,SHA1]"
