NETSH - Windows Vista / 2008

netsh » ipsec » dynamic » add » rule

Microsoft Windows [Version 6.0.6001]
(C) Copyright 2006 Microsoft Corp.
c:\windows>netsh ipsec dynamic add rule ? Usage: rule [ srcaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server) [ dstaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server) [ mmpolicy = ] [ [ qmpolicy = ] ] [ [ protocol = ] (ANY | ICMP | TCP | UDP | RAW | ) ] [ [ srcport = ] ] [ [ dstport = ] ] [ [ mirrored = ] (yes | no) ] [ [ conntype = ] (lan | dialup | all) ] [ [ actioninbound = ] (permit | block | negotiate) ] [ [ actionoutbound = ] (permit | block | negotiate) ] [ [ srcmask = ] (mask | prefix) ] [ [ dstmask = ] (mask | prefix) ] [ [ tunneldstaddress = ] (ip | dns) ] [ [ kerberos = ] (yes | no) ] [ [ psk = ] ] [ [ rootca = ] " certmap:(yes | no) excludecaname:(yes | no)" ] Adds a Rule. Parameters: Tag Value srcaddr - Source ip address (ipv4 or ipv6), address range, dns name, or server type. dstaddr -Destination ip address (ipv4 or ipv6), address range, dns name, or server type. mmpolicy -Main mode policy qmpolicy -Quick mode policy protocol -Can be ANY, ICMP, TCP, UDP, RAW, or an integer. If you specify a port, acceptable value is TCP or UDP. srcport -Source port(0 means any port) dstport -Destination port(0 means any port) mirrored -'Yes' creates two filters, one in each direction. conntype -Connection type actioninbound -Action for inbound packets actionoutbound -Action for outbound packets srcmask -Source address mask or a prefix of 1 through 32. Not applicable if srcaddr is set to a range dstmask -Destination address mask or a prefix of 1 through 32. Not applicable if dstaddr is set to a range tunneldstaddress -Tunnel destination ip address or dns name. kerberos -Provides kerberos authentication if 'yes' is specified. psk -Provides authentication using a specified preshared key. rootca -Provides authentication using a specified root certificate, attempts to map the cert if certmap:Yes is specified, excludes the CA name if excludecaname:Yes is specified. Remarks: 1. Port valid for TCP and UDP. 2. Server type can be WINS, DNS, DHCP or GATEWAY 3. Default for actioninbound and actionoutbound is 'negotiate'. 4. For tunnel rules, mirrored must be set to 'no'. 5. Certificate, mapping, and CA name settings are all to be within quotes; embedded quotes are to be replaced with \'. 6. Certificate mapping is valid only for domain members. 7. Multiple certificates can be provided by using the rootca parameter multiple times. 8. The preference of each authentication method is determined by its order in the command. 9. If no auth methods are stated, dynamic defaults are used. 10. Excluding the root certification authority (CA) name prevents the name from being sent as part of the certificate request. 11. If an address range is specified, the endpoints need to be specific addresses (not lists, or subnets) and of the same type (both should be v4 or both should be v6). Example: add rule srcaddr=192.168.145.110 dstaddr=192.168.145.215 mmpolicy=mmp qmpolicy=qmp mirrored=no srcmask=32 dstmask=255.255.255.255 rootca="C=US,O=MSFT,CN=Microsoft Authenticode(tm) Root Authority" rootca="C=US,O=MSFT,CN=\'Microsoft North, South, East, and West Root Authority\' certmap:yes excludecaname:no"

NETSH / IPSEC / DYNAMIC / ADD / RULE

netsh ipsec dynamic add rule - Windows Vista - command Adds a rule and associated filters to SPD. / Windows Vista
netsh, ipsec, dynamic, add, rule, cmd, command, Windows, Vista
Quick - Link:
netsh p2p pnrp peer add registration
Registers a peer name.
netsh interface ipv6 isatap dump
Displays a configuration script.
netsh ras show status
Shows the status of the Routing and Remote Access Server.
netsh ipsec dynamic add qmpolicy
Adds a quick mode policy to SPD.
netsh advfirewall import
Imports a policy file into the current policy store.
netsh nap client show csps
Shows CSP configuration.








... Windows-10




Windows 10 How To

... Windows 10 FAQ
... Windows 10 How To




Adds a rule and associated filters to SPD. / Windows Vista

HTTP: ... cmd/en/Windows_Vista/netsh/ipsec/dynamic/add/rule.htm
0.14
16060

Command line and shut down the computer!

 /

Translate the Find.Same.Images.OK in my Language!

 /

Was ist Bloatware?

 /

Windows 11 and 10 remove frequent folders from explorer (quick access)?

 /

Jump to a certain point in the Explorer history / navigation!

 /

Can I uninstall Win Scan To PDF from Windows 11, 10, 8.1, ...?

 /

What is a char?

 /

Help Windows 11 doesn't have a device manager, why?

 /

Why unlock and delete Windows files?

 /

MEMORY.DMP file?

 /

How can i change the preview filter settings for Q-Explorer List Views?

 /

How to see the Folder network access under Windows 10 or 11?

 /