Using the netsh advfirewall command
hello - i'm running following command on windows 2008 server create connection security rule between 2 devices.
netsh advfirewall consec add rule name=".secrule" endpoint1="192.168.0.1" endpoint2="192.168.0.2" action=requireinrequestout protocol=any interfacetype=any
when check properties of rule -> authentication -> method, advanced selected computer (kerb v5) first authentication.
does know how select method -> default script?
there simular post here no real answer http://social.technet.microsoft.com/forums/en-us/winserversecurity/thread/0d972d07-8089-4416-a1f6-0df7f4593b6c/
any appreciated.
regards
sarty
hi,
thanks post.
please note default authentication method computer (kerberos v5). if not specify authentication method in script, computer (kerberos v5) in advance. in command-line auth1=computerkerb. script, must specific authentication method used. cannot ui directly choose default method.
for more detailed information authentication method choose. previous post, please check following options.
(default)
[auth1=computerkerb|computercert|computercertecdsap256|
computercertecdsap384|computerpsk|computerntlm|anonymous[,...]]
[auth1psk=<string>]
[auth1ca="<ca name> [certmapping:yes|no] [excludecaname:yes|no]
[catype:root|intermediate (default=root)] |..."]
[auth1healthcert=yes|no (default=no)]
[auth1ecdsap256ca="<ca name> [certmapping:yes|no]
[excludecaname:yes|no]
[catype:root|intermediate (default=root)] | ..."]
[auth1ecdsap256healthcert=yes|no (default=no)]
[auth1ecdsap384ca="<ca name> [certmapping:yes|no]
[excludecaname:yes|no]
[catype:root|intermediate (default=root)] | ..."]
[auth1ecdsap384healthcert=yes|no (default=no)]
[auth2=computercert|computercertecdsap256|computercertecdsap384|
userkerb|usercert|usercertecdsap256|usercertecdsap384|userntlm|
anonymous[,...]]
[auth2ca="<ca name> [certmapping:yes|no]
[catype:root|intermediate (default=root)] | ..."]
[auth2ecdsap256ca="<ca name> [certmapping:yes|no]
[catype:root|intermediate (default=root)] | ..."]
[auth2ecdsap384ca="<ca name> [certmapping:yes|no]
[catype:root|intermediate (default=root)] | ..."]
best regards,
aiden
aiden cao
technet community support
Windows Server > Security
Comments
Post a Comment