Using the netsh advfirewall command


hello - i'm running following command on windows 2008 server create connection security rule between 2 devices.

netsh advfirewall consec add rule name=".secrule" endpoint1="192.168.0.1" endpoint2="192.168.0.2" action=requireinrequestout protocol=any interfacetype=any

when check properties of rule -> authentication -> method, advanced selected computer (kerb v5) first authentication.

does know how select method -> default script?

there simular post here no real answer http://social.technet.microsoft.com/forums/en-us/winserversecurity/thread/0d972d07-8089-4416-a1f6-0df7f4593b6c/

any appreciated.

regards

sarty

hi,

thanks post.

please note default authentication method computer (kerberos v5). if not specify authentication method in script, computer (kerberos v5) in advance. in command-line auth1=computerkerb. script, must specific authentication method used. cannot ui directly choose default method.

for more detailed information authentication method choose. previous post, please check following options.

                 (default)

      [auth1=computerkerb|computercert|computercertecdsap256|

         computercertecdsap384|computerpsk|computerntlm|anonymous[,...]]

     [auth1psk=<string>]

      [auth1ca="<ca name> [certmapping:yes|no] [excludecaname:yes|no]

         [catype:root|intermediate (default=root)] |..."]

      [auth1healthcert=yes|no (default=no)]

      [auth1ecdsap256ca="<ca name> [certmapping:yes|no]

         [excludecaname:yes|no]

         [catype:root|intermediate (default=root)] | ..."]

      [auth1ecdsap256healthcert=yes|no (default=no)]

      [auth1ecdsap384ca="<ca name> [certmapping:yes|no]

         [excludecaname:yes|no]

         [catype:root|intermediate (default=root)] | ..."]

      [auth1ecdsap384healthcert=yes|no (default=no)]

      [auth2=computercert|computercertecdsap256|computercertecdsap384|

         userkerb|usercert|usercertecdsap256|usercertecdsap384|userntlm|

         anonymous[,...]]

      [auth2ca="<ca name> [certmapping:yes|no]

         [catype:root|intermediate (default=root)] | ..."]

      [auth2ecdsap256ca="<ca name> [certmapping:yes|no]

         [catype:root|intermediate (default=root)] | ..."]

      [auth2ecdsap384ca="<ca name> [certmapping:yes|no]

         [catype:root|intermediate (default=root)] | ..."]



best regards,

aiden


aiden cao

technet community support



Windows Server  >  Security



Comments

Popular posts from this blog

Generating Event ID 91, 44 with CA (In Event Viewer with source as Certsvc)

Group policy default policy cannot be edited because network name not found

Windows server 2012 r2 inplace upgrade failed