cmd line setup for ipsec on XP Pro

[Guest]

Hi guys,

hoping someone has achieved this

i know you can setup IPSec via mmc and by creating a secpol snap-in - this
i've done

what i'm trying to achieve is via the cmd line (for use when running a batch
file to create a generic policy to cover terminal services communication
across multiple PC's on a network). I've got the crux of it from the windows
resource site, but it doesn't go into how to set a couple of the options
within the security policy. specifically:

"Filter Action"-tab - "Require Security" :
"Accept unsecured communication, but always respond using IPSec";and
"Allow unsecured communication with non-IPSec-aware computer"

i'm issuing this cmd so far:

ipseccmd -f *+0:3389:TCP -a p:"preshared key" -w reg -p "policy name" -r
"rule name" -y'

see this pic:
http://members.optusnet.com.au/benquach/ipsec.JPG

 

[Carey Frisch [MVP]]

You must set up an IPSec connection through the IPSec MMC snap-in.
You cannot create it using a standard network connection.

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

----------------------------------------------------------------------------

:

| Hi guys,
|
| hoping someone has achieved this
|
| i know you can setup IPSec via mmc and by creating a secpol snap-in - this
| i've done
|
| what i'm trying to achieve is via the cmd line (for use when running a batch
| file to create a generic policy to cover terminal services communication
| across multiple PC's on a network). I've got the crux of it from the windows
| resource site, but it doesn't go into how to set a couple of the options
| within the security policy. specifically:
|
| "Filter Action"-tab - "Require Security" :
| "Accept unsecured communication, but always respond using IPSec";and
| "Allow unsecured communication with non-IPSec-aware computer"
|
| i'm issuing this cmd so far:
|
| ipseccmd -f *+0:3389:TCP -a p:"preshared key" -w reg -p "policy name" -r
| "rule name" -y'
|
| see this pic:
| http://members.optusnet.com.au/benquach/ipsec.JPG