Using the netsh advfirewall command


hello - i'm running following command on windows 2008 server create connection security rule between 2 devices.

netsh advfirewall consec add rule name=".secrule" endpoint1="192.168.0.1" endpoint2="192.168.0.2" action=requireinrequestout protocol=any interfacetype=any

when check properties of rule -> authentication -> method, advanced selected computer (kerb v5) first authentication.

does know how select method -> default script?

there simular post here no real answer http://social.technet.microsoft.com/forums/en-us/winserversecurity/thread/0d972d07-8089-4416-a1f6-0df7f4593b6c/

any appreciated.

regards

sarty

hi,

thanks post.

please note default authentication method computer (kerberos v5). if not specify authentication method in script, computer (kerberos v5) in advance. in command-line auth1=computerkerb. script, must specific authentication method used. cannot ui directly choose default method.

for more detailed information authentication method choose. previous post, please check following options.

                 (default)

      [auth1=computerkerb|computercert|computercertecdsap256|

         computercertecdsap384|computerpsk|computerntlm|anonymous[,...]]

     [auth1psk=<string>]

      [auth1ca="<ca name> [certmapping:yes|no] [excludecaname:yes|no]

         [catype:root|intermediate (default=root)] |..."]

      [auth1healthcert=yes|no (default=no)]

      [auth1ecdsap256ca="<ca name> [certmapping:yes|no]

         [excludecaname:yes|no]

         [catype:root|intermediate (default=root)] | ..."]

      [auth1ecdsap256healthcert=yes|no (default=no)]

      [auth1ecdsap384ca="<ca name> [certmapping:yes|no]

         [excludecaname:yes|no]

         [catype:root|intermediate (default=root)] | ..."]

      [auth1ecdsap384healthcert=yes|no (default=no)]

      [auth2=computercert|computercertecdsap256|computercertecdsap384|

         userkerb|usercert|usercertecdsap256|usercertecdsap384|userntlm|

         anonymous[,...]]

      [auth2ca="<ca name> [certmapping:yes|no]

         [catype:root|intermediate (default=root)] | ..."]

      [auth2ecdsap256ca="<ca name> [certmapping:yes|no]

         [catype:root|intermediate (default=root)] | ..."]

      [auth2ecdsap384ca="<ca name> [certmapping:yes|no]

         [catype:root|intermediate (default=root)] | ..."]



best regards,

aiden


aiden cao

technet community support



Windows Server  >  Security



Comments

Popular posts from this blog

WIMMount (HSM) causing cluster storage to go redirected (2012r2 DC)

Failed to delete the test record dcdiag-test-record in zone test.com

Azure MFA with Azure AD and RDS