Using the netsh advfirewall command


hello - i'm running following command on windows 2008 server create connection security rule between 2 devices.

netsh advfirewall consec add rule name=".secrule" endpoint1="192.168.0.1" endpoint2="192.168.0.2" action=requireinrequestout protocol=any interfacetype=any

when check properties of rule -> authentication -> method, advanced selected computer (kerb v5) first authentication.

does know how select method -> default script?

there simular post here no real answer http://social.technet.microsoft.com/forums/en-us/winserversecurity/thread/0d972d07-8089-4416-a1f6-0df7f4593b6c/

any appreciated.

regards

sarty

hi,

thanks post.

please note default authentication method computer (kerberos v5). if not specify authentication method in script, computer (kerberos v5) in advance. in command-line auth1=computerkerb. script, must specific authentication method used. cannot ui directly choose default method.

for more detailed information authentication method choose. previous post, please check following options.

                 (default)

      [auth1=computerkerb|computercert|computercertecdsap256|

         computercertecdsap384|computerpsk|computerntlm|anonymous[,...]]

     [auth1psk=<string>]

      [auth1ca="<ca name> [certmapping:yes|no] [excludecaname:yes|no]

         [catype:root|intermediate (default=root)] |..."]

      [auth1healthcert=yes|no (default=no)]

      [auth1ecdsap256ca="<ca name> [certmapping:yes|no]

         [excludecaname:yes|no]

         [catype:root|intermediate (default=root)] | ..."]

      [auth1ecdsap256healthcert=yes|no (default=no)]

      [auth1ecdsap384ca="<ca name> [certmapping:yes|no]

         [excludecaname:yes|no]

         [catype:root|intermediate (default=root)] | ..."]

      [auth1ecdsap384healthcert=yes|no (default=no)]

      [auth2=computercert|computercertecdsap256|computercertecdsap384|

         userkerb|usercert|usercertecdsap256|usercertecdsap384|userntlm|

         anonymous[,...]]

      [auth2ca="<ca name> [certmapping:yes|no]

         [catype:root|intermediate (default=root)] | ..."]

      [auth2ecdsap256ca="<ca name> [certmapping:yes|no]

         [catype:root|intermediate (default=root)] | ..."]

      [auth2ecdsap384ca="<ca name> [certmapping:yes|no]

         [catype:root|intermediate (default=root)] | ..."]



best regards,

aiden


aiden cao

technet community support



Windows Server  >  Security



Comments

Popular posts from this blog

Azure MFA with Azure AD and RDS

Failed to setup initiator portal. Error status is given in the dump data.

Invalid pointer on gpresult /h gpreport.html