HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/System32/zh-TW/nshipsec.dll.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!

 2@ 8�8.rdata�@@.rsrc �@@T�t
T88T�t$��8.rdata8x.rdata$zzzdbg .rsrc$01=�.rsrc$02 M�ȍY��y�gl3T
��l���(x6duT�t�(�@�� ���8��P��h����������������������(��@��X��p�����������������0�H�`�x�������-��.��3�@ �S8�YP�Zh�[��_��`��x��~�����	��(	��@	��X	��p	���	���	���	���	���	��
��
��0
��H
��`
��x
���
��
��
��
��
�� �8�P�'h�(��-��4��:��F��G��M�N(�S@�YX�_p�`��f��l��r��x��y
��
��0
��H
��`
��x
���
���
���
���
���
���� ��8��P��h����������������������(��@��X��p���������������������0��H��`��x�������������`��a�b �c8�fP�gh�h��i��j��k��l��m��n�o(�p@�qX�rp�s��t����������������0��H�`�x��������(8HXhx��������(8HXhx��������(8HXhx��������(8HXhx��������(8HXhx��������(8HXhx��������(8HXhx��������(8HXhx��������(8HXhx��������=���=p�0>���@"�C���C�/�PsX��s��,t�6�̪6��������<���������"���J�������#��J�����H�����!�X4��<5j��C��LD\��EH4��y|�l{�||T��|���}��$�Ԁ����8��������@�p�����P�����������>� �h����� ���В������@��P���L�4���J�̙^�,�<�h����0�$�����$�Ԟ��С��l������إ����������,�b���Z��D�0���ԭ��2�������`�T�f�������l��z����� �����p��D�`�D�����P�D���D�ظd�<�H�����X�^�����p����(�@�
�L�F������D�`�T���8����T�D��� �������������N������~�t���$�d���Z�������������L���v�l�������V����������������p�d�������������T���L�X���d�������pF��l�$�����p ����<��$
h�����B��n�@��8R��l�����������MUI����a�1��-�B���W�N4\9�mG=�a��C����MUIzh-TW�_�SGRX[>e@S/S�Q@b	g��GR0
\�SGR�_�jHh/SeQ0R�SGRX[>e@S0

���S�-��{�O��GR0
�
O(u�e_:
  exportpolicy [ file = ] <string>

      \@b	g�SGR/S�Q0R�jHh0

�Sxe:

      j�        <P
      name       -��ZP�p�SGR/S�Q�v�v0WKN�jHh�v
T1z0

�P;�: (W�-��`�lNg�e�X .ipsec oR�j
T0R�jHh
T1z0

�{�O: exportpolicy Policy1

�
O(u�e_:
      importpolicy [ file = ] <string>

      �_c�[�jHh/SeQ�SGR0

�Sxe:

      j�        <P
      name       -/SeQ�SGR�v�jHh
T1z0

�P;�:

�{�O: importpolicy Policy1.ipsec

PA
O(u�e_:
      restorepolicyexamples [release = ] (win2k | win2003)

      ���S�-��SGR0

�Sxe:

      j�        <P
      release    -OS |vL�^��W��-��SGR�{�O0

�P;�: �P}T�N�S��WY(u(W,g_j��f��SGRX[>e@S
N0

�{�O: 1. restorepolicyexamples release=win2003
      2. restorepolicyexamples release=win2k

PA�^�z�SGR�T�vܕnj
�0
�^�z	g�-��V�a��GR�v�SGR0
�^�znzz�v�{x�hVn�U0
	�^�z�{x�hV�R\O0
�pc�[�v�SGR�^�z��GR0

�e�X�{x�hV0R�{x�hVn�U0
PA,
O(u�e_:
  policy [ name = ] <string>
         [ [ description = ] <string> ]
         [ [ mmpfs = ] (yes | no) ]
         [ [ qmpermm = ] <integer> ]
         [ [ mmlifetime = ] <integer> ]
         [ [ activatedefaultrule = ] (yes | no) ]
         [ [ pollinginterval = ] <integer> ]
         [ [ assign = ] (yes | no) ]
         [ [ mmsecmethods = ] (sec#1 sec#2 ... sec#n) ]

  O(uc�[�v
T1z�^�z�SGR0

�Sxe:

  j�                  <P
  name                 -�SGR�v
T1z0
  description          -�SGR�v!|�wnj
�0
  mmpfs                --��[;NWb_�[teI���[�x�vx��0
  qmpermm              -�kNP IKE ;N��!j_�]\O���k-N�v�_�!j_�]\O���kxe0
  mmlifetime           -IKE ;N��!j_�v͑�e8�eQBf�� (�NR��)0
  activatedefaultrule  -_U(ub\P(u�-��v�V�a��GR0�S	g(W Windows Vista KNMR�v
                        Windows Hr,gMb	gHe0
  pollinginterval      -�SGR�Nt�v*�b����� (�NR��)��k��c�[�vBf��g�j�g
                        �SGRX[>e@S�v���f0
  assign               -\�SGRc>m�pO(ub
NO(u0
  mmsecmethods         -�N ConfAlg-HashAlg-GroupNum <h_R�QNPbYP
                        �Nzz<hR���v�[hQ�e_n�U�vQ-N ConfAlg �S�N/f DES b
                        3DES�� HashAlg �S�N/f MD5 b SHA10
                        GroupNum �S�N/f 1 (Low)02 (Med)03 (DH2048)0

�P;�:  1. �Y�gc�[�N mmpfs�qmpermm g-��[b 10
       2. �Y�gX[>e@S/f 'domain'�GR  assign  \!qHe0
       3. 
N�^p�O(u DES � MD50��N�[�x�}o�o�{�l�P�c�O�p
             �V�n�v�['`KN(u0

�{�O: add policy Policy1 mmpfs= yes assign=yes
      mmsec="3DES-SHA1-3 DES-MD5-3 3DES-MD5-2"

�
O(u�e_:
  filterlist [ name = ] <string>
             [ [ description = ] <string> ]

  O(uc�[
T1z�^�zNPzz}v�{x�hVn�U0

�Sxe:

  j�          <P
  name         -�{x�hVn�U
T1z0
  description  -�{x�hVn�U�vܕ!|�wnj
�0

�P;�:

�{�O: add filterlist Filter1

�
O(u�e_:
  filteraction [ name = ] <string>
               [ [ description = ] <string> ]
               [ [ qmpfs = ] (yes | no) ]
               [ [ inpass  = ] (yes | no) ]
               [ [ soft = ] (yes | no) ]
               [ [ action = ] (permit | block | negotiate) ]
               [ [ qmsecmethods = ] (neg#1 neg#2 ... neg#n) ]

  �^�z�{x�hV�R\O0

�Sxe:

  j�          <P
  name         -�{x�hV�R\O�v
T1z0
  description  -�{x�hV�R\O^��W�v!|�wnj
�0
  qmpfs        -(u�O-��[�_�!j_�[teI���[�x�vx��0
  inpass       -�c�S!q�[hQ'`�v�
��FO/f8l`�O(u IPSec �O�V�a0
                xe<P�S�N/f yes b no 0
  soft         -AQ1�ߍ^� IPSec a�w�v��f��v
N�[hQ�
�0
                xe<P�S�N/f yes b no 0
  action       -�S�N/f permit 0 block b negotiate 0
  qmsecmethods -IPSec �c�ONR<h_KNN:
                ESP[ConfAlg,AuthAlg]:k/s
                AH[HashAlg]:k/s
                AH[HashAlg]+ESP[ConfAlg,AuthAlg]:k/s
                ConfAlg �S�N/f DES b 3DES b None0
                AuthAlg �S�N/f MD5 b SHA1 b None0
                HashAlg /f MD5 b SHA10
                k /f�N KB �p�UMO�vX[Yug0
                s /f�N�y�p�UMO�vX[Yug0

�P;�: 1.  �Y�g�R\O
N/f negotiate GR�_eu�_�!j_�[hQ'`�e_
      2.  
N�^p�O(u DES �T MD50��N�R�[o�{�l�P�c�O�p
�Hr�v�['`KN(u0

�{�O:     add filteraction name=FilterA qmpfs=yes soft=y action=negotiate
          qmsec="AH[MD5]:204800k/300s ESP[DES,SHA1]:30000k/480s"

�
O(u�e_:
  rule [ name = ] <string>
       [ policy = ] <string>
       [ filterlist = ] <string>
       [ filteraction = ] <string>
       [ [ tunnel = ] (ip | dns) ]
       [ [ conntype = ] (lan | dialup | all) ]
       [ [ activate = ] (yes | no) ]
       [ [ description = ] <string> ]
       [ [ kerberos = ] (yes | no) ]
       [ [ psk = ] <preshared key> ]
       [ [ rootca = ] "<certificate> certmap:(yes | no) excludecaname:(yes | no)" ]

  (uc�[�v�{x�hV�T�{x�hV�R\O�^�z��GR0

�Sxe:

  j�           <P
  name          -��GR
T1z0
  policy        -��GR@bl\�v�SGR
T1z0
  filterlist    -��O(u�v�{x�hVn�U
T1z0
  filteraction  -��O(u�v�{x�hV�R\O
T1z0
  tunnel        -�S��zޞ IP MO@W0
  conntype      -#��}^��W�S�N/f lan � dialup b all 0
  activate      -�Y�gc�[�N yes GR_U(u�SGRሄv��GR0
  description   -��GR�v!|�wnj
�0
  kerberos      -�Y�gc�[�N yes GR�c�O Kerberos W�I�0
  psk           -O(uc�[�v�HQqQ(uёp��O�c�OW�I�0
  rootca        -O(uc�[�v9h�aI��O�c�OW�I��
                 �Y�gc�[�N certmap:Yes GRVf�
\�a�aI��
                 �Y�gc�[�N excludecaname:Yes GR�cd� CA 
T1z0

�P;�:     1. �aI�0
\�a��T CA 
T1z-��[���ar�(u__�S
W; (u \' �O�N�fgQL]__�0
          2. �aI�
\�a�S	g(W�}�Wb�T
NMbck�x0
          3. �S�NY!kO(u rootca �Sxe�O�c�OY͑�aI�0
          4. �kPW�I��e�l�v��^/f1u�[(W}T�Nሄv��^�Ozl�[�v0
          5. �Y�g�l	gc�[W�I��e�l�GRO(u�RKa�-�<P0
          6. �cd�9h�aI��c
k�UMO
T1zg2�bk
T1z��vub�aI���Bl�vN�R��P��Q0

�{�O:     add rule name=Rule policy=Policy filterlist=Filterlist
          filteraction=FilterAction kerberos=yes psk="my key"
          rootca="C=US,O=MSFT,CN=Microsoft Authenticode(tm) Root Authority"
          rootca="C=US,O=MSFT,CN=\ Microsoft North, South, East, and West Root
          Authority\  certmap:yes excludecaname:no"

�
O(u�e_:
  filter [ filterlist = ] <string>
         [ srcaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server)
         [ dstaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server)
         [ [ description = ] <string> ]
         [ [ protocol = ] (ANY | ICMP | TCP | UDP | RAW | <integer>) ]
         [ [ mirrored = ] (yes  |  no) ]
         [ [ srcmask = ] (mask | prefix) ]
         [ [ dstmask = ] (mask | prefix) ]
         [ [ srcport = ] <port> ]
         [ [ dstport = ] <port> ]

  �e�X�{x�hV0Rc�[�v�{x�hVn�U0

�Sxe:

  j�           <P
  filterlist    -���e�X�{x�hV�v�{x�hVn�U
T1z0
  srcaddr       -�O�n IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  dstaddr       -�v�v0W IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  description   -�{x�hV�v!|�wnj
�0
  protocol      -�S�N/f ANY0ICMP0TCP0UDP0RAW btexe0
  mirrored      -'Yes'g�^�ziQP�{x�hV��kP�eTNP0
  srcmask       -�O�nMO@Wn�iMO@Wn�ib 1 0R 32 ���v���x0� srcaddr -��p�{
WGR
Ni�(u
  dstmask       -�v�v0WMO@Wn�ib 1 0R 32 ���v���x0� dstaddr -��p�{
WGR
Ni�(u
  srcport       -\S�v�O�n#��c�W00 �Nh��NUO#��c�W0
  dstport       -\S�v�v�v0W#��c�W00 �Nh��NUO#��c�W0

�P;�:  1. ��{x�hVn�U
NX[(WGR\�^�z�[0
          2. 傁�c�[�vMR��f�MO@W�ˊ-��[ srcaddr/dstaddr=me
             傁�c�[@b	g��f�MOn�ˊ-��[ srcaddr/dstaddr=any
          3. :O
ghV^��W�S�N/f WINS0DNS0DHCP b GATEWAY0
          4. 傆O�n/f:O
ghV^��W�GR dest /f 'me'��SKN�N6q0
          5. �c�[MO@W�{
W�GR�zޞ�_�/fyr�[MO@W (
N�S�N/fn�UbP[�}�) N�p�vT^��W (�ar�iQ���/f v4 biQ���/f v6)0

�{�O: 1. add filter filterlist=Filter1 192.145.168.0 192.145.168.45
          srcmask=24 dstmask=32
          2. add filter filterlist=Filter1 srcaddr=DHCP dstaddr=0.0.0.0
          protocol=ICMP srcmask=255.255.255.255 dstmask=255.255.255.255
          3. add filter filterlist=Filter1 srcaddr=me dstaddr=any
          4. add filter filterlist=Filter1 srcaddr= E3D7::51F4:9BC8:00A8:6420 dstaddr= ME
          5. add filter filterlist=Filter1 srcaddr= 192.168.2.1-192,168.2.10 dstaddr= ME


�O9e�sX[�SGR�T�vܕnj
�0
�O9e�SGR0
	�O9e�{x�hVn�U0
	�O9e�{x�hV�R\O0
�O9e��GR0
-��[�vMR�v�SGRX[>e@S0

�O9e�SGR�v�-��V�a��GR0

-��[yb!k�f�e!j_0
S
O(u�e_:
  policy [ name = ] <string> | [ guid = ] <guid>
         [ [ newname = ] <string> ]
         [ [ description = ] <string> ]
         [ [ mmpfs = ] (yes | no) ]
         [ [ qmpermm = ] <integer> ]
         [ [ mmlifetime = ] <integer> ]
         [ [ activatedefaultrule = ] ( yes | no) ]
         [ [ pollinginterval = ] <integer> ]
         [ [ assign = ] (yes | no) ]
         [ [ gponame = ] <string> ]
         [ [ mmsecmethods = ] (sec#1 sec#2 ... sec#n) ]

  �O9e�SGR0

�Sxe:

  j�                 <P
  name | guid         -�SGR�v
T1zb GUID0
  newname             -�e
T1z0
  description         -!|�wnj
�0
  mmpfs               --��[;N�[teI���[�x0
  qmpermm             -�kP;N��!j_�v�_�!j_xe�v0
  mmlifetime          -͑�e�^�zёp��vBf��0
  activatedefaultrule -_U(u�-��V�a��GR0�S	g(W Windows Vista KNMR�v Windows
                       Hr,gMb	gHe0
  pollinginterval     -�j�g�SGRX[>e@S���f�vBf�� (�NR��p�UMO)0
  assign              -c>m�SGR0
  gponame             -�S�pvQc>m�SGR�v,g_j AD �D}�SGRir�N
T1z0�S	g(WX[>e
                       @S/f�}�WBfMb	gHe0
  mmsecmethods        -�Nzz<hR���v�[hQ'`�e�ln�U�vQ<h_�p
                       ConfAlg-HashAlg-GroupNum0

�P;�:  1. ��]c�[ mmpfs�GR qmpermm g-��[�p 10
       2. �S	gvuX[>e@S-��[�p�}�WBf�Mb��c�[ GPO 
T1z0
       3. 
N�^p�O(u DES � MD50��N�[�x�}o�o�{�l�P�c�O�p�V�n�v�['`KN(u0

�{�O:  1. set policy name=Policy mmpfs=y gpo=DomainPolicy assign=y
       2. set policy guid={11E6E97E-0031-49f5-AC7D-5F2FE99BABAF}
          newname=NewName gpo=DefaultDomainPolicy assign=y

�
O(u�e_:
  filterlist [ name = ] <string> | [ guid = <guid> ]
             [ [ newname = ] <string> ]
             [ [ description = ] <string> ]

  �O9e�{x�hVn�U�v
T1z�T�c�0

�Sxe:

  j�          <P
  name | guid  -�{x�hVn�Ub guid �v
T1z0
  newname      -�{x�hVn�U�v�e
T1z0
  description  -�{x�hVn�U�v!|�wnj
�0

�{�O: 1. set filterlist Filter1 desc=NewFilter1
      2. set filterlist guid={11E6E97E-0031-49f5-AC7D-5F2FE99BABAF}
         newname=FilterName

4
O(u�e_:
  filteraction [ name = ] <string> | [ guid = ] <guid>
               [ [ newname = ] <string> ]
               [ [ description = ] <string> ]
               [ [ qmpfs = ] (yes | no) ]
               [ [ inpass  = ] (yes | no) ]
               [ [ soft = ] (yes | no)  ]
               [ [ action = ] (permit | block | negotiate) ]
               [ [ qmsecmethods = ] (neg#1 neg#2 ... neg#n) ]

  �O9e�{x�hV�R\O0

�Sxe:

  j�           <P
  name | guid   -�{x�hV�R\O
T1zb GUID0
  newname       -�{x�hV�R\O�v�e�X
T1z0
  description   -�{x�hV�R\O�v!|�wnj
�0
  qmpfs         --��[�_�!j_�[teI���[�x�vx��0
  inpass        -�c�S!q�[hQ'`�v�
��FO/f8l`�O(u IPSec �V�a0
                 \�c�S yes b no �v<P0
  soft          -AQ1�ߍ^� IPSec a�w�v��f��v
N�[hQ�
�0
                 \�c�S yes b no �v<P0
  action        -\�c�S permit b block b negotiate0
  qmsecmethods  -IPSec �c�ONR<h_KNN:
                 ESP[ConfAlg,AuthAlg]:k/s
                 AH[HashAlg]:k/s
                 AH[HashAlg]+ESP[ConfAlg,AuthAlg]:k/s
                 ConfAlg �S�N/f DES b 3DES b None0
                 AuthAlg �S�N/f MD5 b SHA1 b None0
                 HashAlg /f MD5 b SHA10
                 k /f�N KB �p�UMO�vX[Yug0
                 s /f�N�y�p�UMO�vX[Yug0

�P;�:  
N�^p�O(u DES �T MD50��N�R�[o�{�l�P�c�O�p
       
�Hr�v�['`KN(u0

�{�O: 1. set filteraction name=test qmsec=ESP[3DES,MD5]:100000k/2000s
      2. set filteraction guid={11E6E97E-0031-49f5-AC7D-5F2FE99BABAF}
         inpass=y


O(u�e_:
  rule [ name = ] <string> | [id= ] <integer>
       [ policy = ] <string>
       [ [ newname = ] <string> ]
       [ [ description = ] <string> ]
       [ [ filterlist = ] <string> ]
       [ [ filteraction = ] <string> ]
       [ [ tunnel = ] (ip | dns) ]
       [ [ conntype = ] (lan | dialup | all) ]
       [ [ activate = ] (yes | no) ]
       [ [ kerberos = ] (yes | no) ]
       [ [ psk = ] <preshared key> ]
       [ [ rootca = ] "<certificate> certmap:(yes | no) excludecaname:(yes | no)" ]

  �O9e�SGRሄv��GR0

�Sxe:

  j�           <P
  name | id     -��GR�v
T1zb ID0
  policy        -��GR@bl\�v�SGR
T1z0
  newname       -��GR�v�e�X
T1z0
  description   -��GR�v!|�wnj
�0
  filterlist    -��O(u�v�{x�hVn�U
T1z0
  filteraction  -��O(u�v�{x�hV�R\O
T1z0
  tunnel        -�S� IP MO@Wb DNS 
T1z0
  conntype      -#��}^��W�S�N/f lan � dialup b all 0
  activate      -�Y�gc�[�N yes GR_U(u�SGRሄv��GR0
  kerberos      -�Y�gc�[�N yes GR�c�O Kerberos W�I�0
  psk           -O(uc�[�v�HQqQ(uёp��O�c�OW�I�0
  rootca        -O(uc�[�v9h�aI��O�c�OW�I���Y�gc�[�N certmap:Yes GR
                 Vf�
\�a�aI���Y�gc�[�N excludecaname:Yes GR�cd� CA 
T1z0

�P;�:     1. �aI�0
\�a��T CA 
T1z-��[����(u__�SOO; (u \' �O�S�NL]eQ___�0
          2. �S	g(W�}�Wb�TሑaI�
\�aMbck�x0
          3. �S�NY!kO(u rootca �Sxe�O�c�OY͑�aI�0
          4. �kPW�I��e�l�v*QHQ��^/f1u�[(W}T�Nሄv��^zl�[�v0
          5. �Y�g�l	gc�[W�I��e�l�gO(u�RKa�-�<P0
          6. g(uc�[�vn�U�O���[@b	gW�I��e�l0
          7. �cd�9h�aI��c
k�UMO (CA) 
T1z\2�bkr�
T1z��vub�aI���Bl�vN�R��P�Q0

�{�O:     1. set rule name=Rule policy=Policy activate=yes
             rootca="C=US,O=MSFT,CN=\ Microsoft North, South, East, and West
             Root Authority\  certmap:yes excludecaname:no"
          2. set rule id=3 Policy newname=RuleNew tunnel=192.165.123.156

�
O(u�e_:
  store [location = ] (local | domain)
        [ [ domain = ] <string> ]

-��[�vMR IPsec �SGRX[>e@SMOn0

�Sxe:

  j�        <P
  location    IPsec �SGRX[>e@S�vMOn0
  domain      �}�W
T1z (�Si�(u�e�}�WMOn)0

�P;�:     1. ,g_jX[>e@SS+T�S�Nc>m�O�Ow�dk��f��[hQ�v IPsec �SGR0�Y�g	g�S(u
             �v�}�W�SGR�gWY(u�}�W�SGR�O�N�f,g_j�SGR0
          2. �}�WX[>e@SS+T�Sc>m�O�Ow��}�W
N��f��D}�[hQ�v IPsec �SGR0
          3. O(u 'set machine' }T�N�O-��[`��z��f�0
          4. �-�X[>e@S/f,g_j0X[>e@S�v-��[���f�S(W�vMR�v Netsh �]\O���k-N
             	gHe0�Y�g�`���(uyb!k�j(W�vT�vX[>e@S
N�WL�Y͑}T�N�ˊ(W�WL�
             �`�vyb!k�jBfO(u  Netsh Exec 0
          5. 
N/e�cc�~'`X[>e@S�c�~'`�SGR0


�{�O:     1. set store location=
local
           - O(u�vMR��f��v,g_jX[>e@S0

          2. set store location=domain domain=example.microsoft.
com
           - O(u example.microsoft.com �v�}�W�SGRX[>e@S0


�
O(u�e_:
  defaultrule [ policy = ] <string>
              [ [ qmpfs = ] (yes | no) ]
              [ [ activate = ] (yes | no) ]
              [ [ qmsecmethods = ] (neg#1 neg#2 ... neg#n) ]
              [ [ kerberos = ] (yes | no) ]
              [ [ psk = ] <preshared key> ]
              [ [ rootca = ] "<certificate> certmap:(yes | no) excludecaname:(yes | no)" ]

  �O9ec�[�SGR�v�-���GR0
  (W Windows Vista �
�Hr Windows 
Ng�_eudk��GR
 

�Sxe:

  j�            
<P
  policy       -���O9e�-��V�a��GR�v  
�SGR
                
T1z0

  qmpfs        -(u�O-��[�_�!j_�[te�P��[�x�vx��0

  activate     -�Y�gc�[�p yes GR_U�R��GR0

  qmsecmethods -IPsec �c�ONR<h_KNN:
                ESP[ConfAlg,AuthAlg]:k/ 
s
                AH[HashAlg]:k/ 
s
                AH[HashAlg]+ESP[ConfAlg,AuthAlg]:k/ 
s
                ConfAlg �S�N�p DES03DES b None0

                AuthAlg �S�N�p MD50SHA1 b None0

                HashAlg /f MD5 b SHA10

                k /f�N KB �p�UMO�vX[Yug0

                s /f�N�y�p�UMO�vX[Yug0

  kerberos     -�Y�gc�[�p yes GR�c�O Kerberos W�I�0

  psk          -�c�OO(uc�[�HQqQ(uёp��vW�I�0

  rootca       -�c�OO(uc�[9h�aI��vW�I��
                �Y�gc�[�p certmap:Yes�GRVf�
\�a�aI��
                �Y�gc�[�p excludecaname:Yes GR�cd� CA 
T1z0


�P;�:     1. �aI�0
\�a� CA 
T1z-��[����(W__�gQ;  

             (u \' �O�S�NgQL]___�0

          2. �aI�
\�a�S
\�}�Wb�T	gHe0

          3. �S�NY!kO(u  
rootca
             �Sxe�O�c�OY͑�aI�0

          4. �kPW�I��e_�v*QHQ��^  
/f1u
             (W}T�Nሄv��^zl�[0

          5. �Y�g�l	gs��W�I��e�l�GRgO(u�RKa�-�<P
0
6. 
N�^p�O(u DES �T MD50��N�R�[o�{�l�P�c�O�p
       
�Hr�v�['`KN(u0

�{�O: set defaultrule Policy1 activate= 
y
          qmsec="AH[MD5]+ESP[3DES,MD5]:100000k/2000s"

V
O(u�e_:
  set batch [mode = ] (enable | disable) 

  -��[yb!k�f�e!j_0

�Sxe:

mode - yb!k�f�e�v!j_0


*Rd��SGR�T�vܕnj
�0
PA*Rd��SGR�T�[�v��GR0
	*Rd��{x�hVn�U0
	*Rd��{x�hV�R\O0

�_�SGR�*Rd���GR0
�_�{x�hVn�U�*Rd��{x�hV0
*Rd�@b	g�SGR0�{x�hVn�U�T�{x�hV�R\O0
PA
O(u�e_:
  policy [ name = ] <string> | [ all ]

  *Rd��SGR�T�[@b	gܕo��v��GR0

�Sxe:

  j�          <P
  name | all   -�SGR
T1zb all 0

�P;�:     �Y�gc�[�N 'all'�*Rd�@b	g�SGR0

�{�O:     1. delete policy all
           - *Rd�@b	g�SGR0
          2. delete policy name=Policy1
           - *Rd�
T1z�p Policy1 �v�SGR0

�
O(u�e_:
  filterlist [name = ] <string> | [ all ]

  *Rd��{x�hVn�U�T�[@b	gܕo��v�{x�hV0

�Sxe:

  j�          <P
  name | all   -�{x�hVn�U
T1zb all 0

�P;�:     �Y�gc�[�N 'all'�*Rd�@b	g�{x�hVn�U0

�{�O:     delete filterlist all

�
O(u�e_:
  filteraction [ name = ] <string> | [ all ]

  *Rd��{x�hV�R\O0

�Sxe:

  j�            <P
  name | all     -�{x�hV�R\O
T1zb all 0

�P;�:     �Y�gc�[�N 'all'�*Rd�@b	g�{x�hV�R\O0

�{�O:     1. delete filteraction FilterA
          2. delete filteraction all

�
O(u�e_:
  rule [ name = ] <string> | [ id = ] <integer> | [ all ]
       [ policy = ] <string>

  *Rd��SGRሄv��GR0

�Sxe:

  j�              <P
  name | id | all  -��GR
T1z���GR�v ID�b all 
  policy           -�SGR
T1z0

�P;�:     1. �Y�gc�[�N 'all'�*Rd��SGR�@b	g�v��GR�d��N�-��V�a��GRKNY0
          2. !q�l*Rd��-��V�a��GR0
          3. �kP*Rd�g���f ID0

�{�O:     1. delete rule id=1 Policy1
            -*Rd��O� Policy1�id=1 �v��GR0
          2. delete rule all Policy1
            -*Rd�@b	g�O� Policy1 �v��GR0

�
O(u�e_:
  filter [ filterlist = ] <string>
         [ srcaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server)
         [ dstaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server)
         [ [ protocol = ] (ANY | ICMP | TCP | UDP | RAW | <integer>) ]
         [ [ srcmask = ] (mask | prefix) ]
         [ [ dstmask = ] (mask | prefix) ]
         [ [ srcport = ] <port> ]
         [ [ dstport = ] <port> ]
         [ [ mirrored = ] (yes | no) ]

  �_�{x�hVn�U�*Rd��{x�hV

�Sxe:

  j�           <P
  filterlist   -�ReQ�{x�hV�v�{x�hVn�U
T1z0
  srcaddr      - �O�n IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1z�b:O
ghV^��W0
  dstaddr      -�vj IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1z�b:O
ghV^��W0
  protocol     -�S�N/f ANY0ICMP0TCP0UDP0RAW btexe0
  srcmask      -�O�nMO@Wn�ib���x�p 1 0R 320� srcaddr -��p�{
WGR
Ni�(u 
  dstmask      -�vjMO@Wn�ib���x�p 1 0R 320 � dstaddr -��p�{
WGR
Ni�(u 
  srcport      -\S�v�O�n#��c�W00 �Nh��NUO#��c�W
  dstport      -\S�v�vj#��c�W00 �Nh��NUO#��c�W0
  mirrored     - Yes g�^�ziQP�{x�hV��kP�eTNP0

�P;�:     1. �_�{x�hVn�U�*Rd��[hQ�v&{�v�{x�hV0
          2. ��c�[�vMR��f�MO@W�ˊ-��[ srcaddr/dstaddr=me
             ��c�[@b	g��f�MO@W�ˊ-��[ srcaddr/dstaddr=any
          3. :O
ghV^��W�S�N/f WINS0DNS0DHCP b GATEWAY0
          4. �Y�g�O�n/f:O
ghV�GR dest ��-��p 'me' �SKN�N6q0
          5.  �Y�g�]�}c�[MO@W�{
W��zޞ�_�/ff�x�vMO@W (
N�S�N�pn�UbP[�}�) N�p�vT^��W (�ar�iQ���/f v4 biQ���/f v6)0

�{�O:     1. delete filter FilterList1 src=fum.com dst=fum.com
          2. delete filter Filter1 srcaddr=me dstaddr=any proto=TCP
          3. delete filter Filter1 srcaddr=GATEWAY dstaddr=0.0.0.0 proto=TCP
          4. delete filter Filter1 srcaddr=192.168.2.1-192.168.2.10 dstaddr=ME

@
O(u�e_:
  all

  *Rd�@b	g�SGR0�{x�hVn�U��T�{x�hV�R\O0

�Sxe:

�P;�:

�{�O: delete all

o�:y�SGR�vs�0}�T�vܕnj
�0
o�:y�SGR�vs�0}nj
�0

o�:y�{x�hVn�Us�0}nj
�0
o�:y�{x�hV�R\O�vs�0}nj
�0
o�:y��GR�vs�0}nj
�0
o�:y@b	g�SGR�vs�0}�T�vܕnj
�0
o�:y�D}c�[�SGR�vs�0}nj
�0
o�:y�vMR�v�SGRX[>e@S0
�
O(u�e_:
  policy [ name = ] <string> | [ all ]
         [ [ level = ] (verbose | normal) ]
         [ [ format = ] (list | table) ]
         [ [ wide = ] (yes | no) ]

  o�:y�SGR�vs�0}nj
�0

�Sxe:

  j�           <P
  name | all    -�SGR
T1zb all 0
  level         -s�0}nj
�bN,�0
  format        -(W��U^
No�:yb�N�[MOu�<h_0
  wide          -�Y�g-��[b no �g*b�e
T1z�T�c��N&{T��U^ 80 W[CQ�v�[�^0

�P;�:  �Y�gc�[�N 'all' �go�:y@b	g�SGR�vs�0}nj
�0

�{�O:  show policy Policy1 wide=yes format=table

�
O(u�e_:
  filterlist [ name = ] <string> | [ rule = ] <string> | [ all ]
             [ [ level = ] (verbose | normal) ]
             [ [ format = ] (list | table) ]
             [ [ resolvedns = ] (yes | no) ]
             [ [ wide = ] (yes | no) ]

  o�:y�{x�hVn�U�vs�0}nj
�0

�Sxe:

  j�                <P
  name | rule | all  -�{x�hVn�U
T1z0��GR
T1z�b all 0
  level              -s�0}nj
�bN,�0
  format             -(W��U^
No�:yb�N�[MOu�<h_0
  resolvedns         - yes \7_6Rs�0}nj
�8��Qo�:y�vMR2QX[(W�{x�hVkMO�v
                      IP MO@W�T DNS 
T1z�v DNS 
\�a0
  wide               -�Y�g-��[b no �g*b�e
T1z�T�c��N&{T��U^
                      80 PW[CQ�v�[�^0

�P;�:     �Y�gc�[�N 'all' �go�:y@b	g�v�{x�hVn�U0

�{�O:     show filterlist Filterlist=Filterlist1 resolvedns=yes wide=yes


O(u�e_:
  filteraction  [ name = ] <string>  | [ rule = ] <string> | [ all ]
                [ [ level = ] (verbose | normal) ]
                [ [ format = ] (list | table) ]
                [ [ wide = ] (yes | no) ]

  o�:y�{x�hV�R\O�vs�0}nj
�0

�Sxe:

  j�                <P
  name | rule | all  -�{x�hV�R\O
T1z0��GR
T1z�b all 0
  level              -s�0}nj
�bN,�0
  format             -(W��U^
No�:yb�N�[MOu�<h_0
  wide               -�Y�g-��[b no �g*b�e
T1z�T�c��N&{T��U^
                      80 PW[CQ�v�[�^0

�P;�:     �Y�gc�[�N 'all'�go�:y@b	g�{x�hV�R\O0

�{�O:     1. show filteraction FilterAction1
           - shows the details of the filter action named FilterAction1
          2. show filteraction rule=Rule1
           - shows the filter action used by the rule named Rule1
          3. show filteraction all
           - shows all filter actions


O(u�e_:
  rule [ name = ] <string>  | [ id = ] <integer> ] | [ all ] | [default]
       [ policy = ] <string>
       [ [ type = ] (tunnel | tranport) ]
       [ [ level = ] (verbose | normal) ]
       [ [ format = ] (list | table) ]
       [ [ wide = ] (yes | no) ]

  o�:y�SGR�v��GRs�0}nj
�0

�Sxe:

  j�                        <P
  name | id | all | default  -��GR
T1z0�[�v ID0 all �b default 0
  policy                     -�SGR
T1z0
  type                       -��GR^��W/f transport b tunnel 0
  level                      -s�0}nj
�bN,�0
  format                     -(W��U^
No�:yb�N�[MOu�<h_0
  wide                       -�Y�g-��[b no �g*b�e
T1z�T�c��N&{T��U^
                              80 PW[CQ�v�[�^0

�P;�:     1. �Y�gc�[�N all �go�:y@b	g��GR0
          2. �Y�gc�[�N^��W�Sxe�GR���c�[ 'all'0

�{�O:     1. show rule all type=transport policy=Policy1
           - shows all the transport rules of the policy named Policy1.
          2. show rule id=1 policy=Policy1
           - shows the first rule of the policy.
          3. show rule default policy=Policy1
           - shows the details of the default response rule of Policy1.

�
O(u�e_:
  all  [ [ format = ] (list | table) ]
       [ [ wide = ] (yes | no) ]

  o�:y@b	g�SGR0�{x�hVn�U��T�{x�hV�R\O0

�Sxe:

  j�          <P
  format       -(W��U^
No�:yb�N�[MOu�<h_0
  wide         -�Y�g-��[b no �g*b�e
T1z�T�c��N&{T��U^ 80 PW[CQ�v�[�^0

�P;�:

�{�O: show all

P
O(u�e_:
  gpoassignedpolicy [name = ] <string>

  o�:yc�[�v GPO �vO(u-N�SGRs�0}nj
�0

�Sxe:

  j�           <P
  Name          -,g_j AD �D}�SGRir�N
T1z0


�P;�:     1. �Y�g�vMR�v2QX[@S/f�}�W�GR��� name �Sxe�&TGR
             \
NAQ1� name �Sxe

�{�O:     1. show gpoassignedpolicy name=GPO1
           - o�:y�]c>mf} GPO1 �v�}�W�SGR0
          2. show gpoassignedpolicy
           - o�:y�vMR(Wdk��f�
Nc>m�v�SGR0

 
O(u�e_:
  store

�{�O: show store

PA(W SPD ሰe�X�SGR0�{x�hV��T�R\O0
PA(W SPD ሰe�X�_�!j_�SGR0
(W SPD ሰe�X;N��!j_�SGR0
(W SPD ሰe�X�_�!j_�{x�hV0
(W SPD ሰe�X;N��!j_�{x�hV0
�e�X��GR�T�vܕ�v�{x�hV0R SPD0

O(u�e_:
  qmpolicy [ name = ] <string>
           [ [ soft = ] (yes | no) ]
           [ [ pfsgroup = ] (GRP1 | GRP2 | GRP3 | GRPMM | NOPFS) ]
           [ [ qmsecmethods = ] (neg#1 neg#2 ... neg#n) ]

  �e�XNP�_�!j_�SGR0R SPD0

�Sxe:

  j�                    <P
  name                   -�_�!j_�SGR�v
T1z0
  soft                   -AQ1��T IPSec �l�la0R�v��f��
                          ZP*g-��[�[hQ�v�
���c�Sxe<P 'yes' b 'no'0
  pfsgroup               -GRP1�GRP2�GRP3�GRPMM�NOPFS(�-�)0
  qmsecmethods           -IPSec �c�ONR~^.z<h_ :
                          ESP[ConfAlg,AuthAlg]:k/s
                          AH[HashAlg]:k/s
                          AH[HashAlg]+ESP[ConfAlg,AuthAlg]:k/s
                          ConfAlg �S�N/f DES b 3DES b None0
                          AuthAlg �S�N/f MD5 b SHA1 b None0
                          HashAlg /f MD5 b SHA10
                          k /fX[Yug (KB)0
                          s /fX[Yug (�y)0

�P;�:  
N�^p�O(u DES �T MD50��N�R�[o�{�l�P�c�O�p
�Hr�v�['`KN(u0
�{�O:     add qmpolicy name=qmp
          qmsec="AH[MD5]:10000k/24800s ESP[DES,SHA1]:30000k/300s"

�
O(u�e�l:
  mmpolicy [ name = ] <string>
           [ [ qmpermm = ] <integer>  ]
           [ [ mmlifetime = ] <integer> ]
           [ [ softsaexpirationtime  = ] <integer> ]
           [ [ mmsecmethods = ] (sec#1 sec#2 ... sec#n) ]

  �e�XNP;N��!j_�SGR0R SPD0

�Sxe:

  j�                    <P
  name                   -;N��!j_�SGR
T1z0
  qmpermm                -�kNP IKE ;N��!j_���k-N�v�_�!j_���kxe0
  mmlifetime             -͑�e8�eQ (�NR��) IKE �v;N��!j_0
  softsaexpirationtime   -*g�S�Ow��v SA 0RgBf�� (�NR��)0
  mmsecmethods           -�N ConfAlg-HashAlg-GroupNum <h_R�QNPbY
                          Pzz<h@SR�[hQ�e_�vn�U0
                          ConfAlg �S��/f DES b 3DES � HashAlg �S��/f
                          MD5 b SHA10
                          GroupNum �S�N/f 1 (Low)� 2 (Med)� 3 (DH2048)0

�P;�:  
N�^p�O(u DES �T MD50��N�R�[�}o�o�{�l�P�c�O�p
�Hr�v�['`KN(u0
�{�O:     add mmp name=mmp qmpermm=10 mmlifetime=300 softsa=20
          mmsec="3DES-SHA1-3 DES-SHA1-2 3DES-MD5-3"

N

O(u�e_:
  rule [ srcaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server)
       [ dstaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server)
       [ mmpolicy = ] <string>
       [ [ qmpolicy = ] <string> ]
       [ [ protocol = ] (ANY | ICMP | TCP | UDP | RAW | <integer>) ]
       [ [ srcport = ] <port> ]
       [ [ dstport = ] <port> ]
       [ [ mirrored = ] (yes | no) ]
       [ [ conntype = ] (lan | dialup | all) ]
       [ [ actioninbound = ] (permit | block | negotiate) ]
       [ [ actionoutbound = ] (permit | block | negotiate) ]
       [ [ srcmask = ] (mask | prefix) ]
       [ [ dstmask = ] (mask | prefix) ]
       [ [ tunneldstaddress = ] (ip | dns) ]
       [ [ kerberos = ] (yes | no) ]
       [ [ psk = ] <preshared key> ]
       [ [ rootca = ] "<certificate> certmap:(yes | no) excludecaname:(yes | no)" ]

  �e�X��GR0

�Sxe:

  j�               <P
  srcaddr          -�O�n IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  dstaddr          -�vj IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  mmpolicy         -;N��!j_�SGR
  qmpolicy         -�_�!j_�SGR
  protocol         -�S�N/f ANY0ICMP0TCP0UDP0RAW btexe0
                    �Y�g�`c�[#��c�W��S�c�S�v<P/f TCP b UDP0 
  srcport          -�O�n#��c�W (0 �Nh��NUO#��c�W)
  dstport          -�vj#��c�W (0 �Nh��NUO#��c�W)
  mirrored         - Yes' g�^�ziQP�{x�hV��kP�eTNP0
  conntype         -#��}^��W
  actioninbound    -8�eQ\S�R\O
  actionoutbound   -8��Q\S�R\O
  srcmask          -�O�nMO@Wn�ib���x�p 1 0R 320� srcaddr -��p�{
WGR
Ni�(u 
  dstmask          -�vjMO@Wn�ib���x�p 1 0R 320� dstaddr -��p�{
WGR
Ni�(u 
  tunneldstaddress -�S��vj IP MO@Wb DNS 
T1z0
  kerberos         -�Y�gc�[�p yes GRg�c�O kerberos W�I�0
  psk              -O(uc�[�v�HQqQ(uёp��O�c�OW�I�0
  rootca           -O(uc�[�v9h�aI��O�c�OW�I��
                    �Y�gc�[�N certmap:Yes GRgVf�
\�a�aI��
                    �Y�gc�[�N excludecaname:Yes GRg�cd� CA 
T1z0

�P;�:    1. TCP �T UDP #��c�WMb	gHe0
         2. :O
ghV^��W�S�N/f WINS0DNS0DHCP b GATEWAY
         3. actioninbound �T actionoutbound �v�-��p negotiate 0
         4. �S���GR�v mirrored �_�-��[b 'no'0
         5. �aI�0
\�a��T CA 
T1z-��[����(W
            __�gQ; �Y�b�\	g__��ˊO(u \' �O�S�N�S,g�v__�0
         6. �S	g(W�}�Wb�TሑaI�
\�aMb	gHe0
         7. �S�NY!kO(u rootca �Sxe�O�c�O
            Y͑�aI�0
         8. �kPW�I��e�l�v*QHQ��^/f1u
            (W}T�Nሄv��^zl�[0
         9. �Y�g�l	gc�[W�I��e�l�GRgO(u�RKa�-�<P0
        10. �cd�9h�aI��c
k�UMO (CA) �v
T1z�S�N2�bk
            
T1z��vub�aI���Bl�vN�R����P��Q�S0
        11. �Y�g�]�}c�[MO@W�{
W��zޞ�_�/ff�x�vMO@W (
N�S�N�pn�UbP[�}�) N�p�vT^��W (�ar�iQ���/f v4 biQ���/f v6)0

�{�O:    add rule srcaddr=192.168.145.110 dstaddr=192.168.145.215 mmpolicy=mmp
         qmpolicy=qmp mirrored=no srcmask=32 dstmask=255.255.255.255
         rootca="C=US,O=MSFT,CN=Microsoft Authenticode(tm) Root Authority"
         rootca="C=US,O=MSFT,CN=\ Microsoft North, South, East, and West Root
         Authority\  certmap:yes excludecaname:no"
PA(W SPD ��O9e�SGR0�{x�hV��T�R\O0
PA(W SPD ��O9e�_�!j_�SGR0
(W SPD ��O9e;N��!j_�SGR0
(W SPD ��O9e�_�!j_�{x�hV0
(W SPD ��O9e;N��!j_�{x�hV0
-��[ IPsec -��[�T��_jBf�vL��p0
(W SPD ��O9e��GR�T�vܕ�v�{x�hV0
�
O(u�e_:
  qmpolicy [ name = ] <string>
           [ [ soft = ] (yes | no) ]
           [ [ pfsgroup = ] (GRP1 | GRP2 | GRP3 | GRPMM | NOPFS) ]
           [ [ qmsecmethods = ] (neg#1 neg#2 ... neg#n) ]

  (W SPD ��O9e�_�!j_�SGR0

�Sxe:

  j�                    <P
  name                   -�_�!j_�SGR
T1z0
  soft                   -AQ1�ߍ^� IPSec a�w�v��f�
N�[hQ�
�0
                          �S�N/f 'yes' b 'no'0
  pfsgroup               -GRP10GRP20GRP30GRPMM�NOPFS (�-�<P)0
  qmsecmethods           -IPSec �c�ONR<h_KNN:
                          ESP[ConfAlg,AuthAlg]:k/s
                          AH[HashAlg]:k/s
                          AH[HashAlg]+ESP[ConfAlg,AuthAlg]:k/s
                          ConfAlg �S�N/f DES b 3DES b None0
                          AuthAlg �S�N/f MD5 b SHA1 b None0
                          HashAlg /f MD5 b SHA10
                          k /f�N KB �p�UMO�vX[Yug0
                          s /f�N�y�p�UMO�vX[Yug0

�P;�:  
N�^p�O(u DES �T MD50��N�R�[�}o�o�{�l�P�c�O�p
�Hr�v�['`KN(u0
�{�O:    set qmpolicy name=qmp pfsg=grp3
         qmsec="AH[MD5]:100000k/29999s+ESP[DES,SHA1]"

>
O(u�e_:
  mmpolicy [ name = ] <string>
           [ [ qmpermm = ] <integer>  ]
           [ [ mmlifetime = ] <integer> ]
           [ [ softsaexpirationtime  = ] <integer> ]
           [ [ mmsecmethods = ] (sec#1 sec#2 ... sec#n) ]

  O(u SPD -N�v�e�Sxe�O9e;N��!j_�SGR0

�Sxe:

  j�                    <P
  name                   -;N��!j_�SGR
T1z0
  qmpermm                -�kNP IKE ;N��!j_���k-N�v�_�!j_���kxe0
  mmlifetime             -͑�e8�eQ (�NR��) IKE �v;N��!j_0
  softsaexpirationtime   -*g�S�Ow��v SA 0RgBf�� (�NR��)0
  mmsecmethods           -�N ConfAlg-HashAlg-GroupNum <h_R�QNPbY
                          Pzz<h@SR�[hQ�e_�vn�U0
                          ConfAlg �S��/f DES b 3DES�HashAlg /f MD5 b SHA1�
                          GroupNum �S��/f 1 (Low) b 2 (Med) b 3 (DH2048)0
�P;�:  
N�^p�O(u DES �T MD50��N�R�[�}o�o�{�l�P�c�O�p
�Hr�v�['`KN(u0
�{�O: set mmpolicy name=mmp qmpermm=10 mmlife=10 mmsecmethod=3DES-MD5-3

i
O(u�e_:
  config [ property = ] (ipsecdiagnostics | ipsecexempt | ipsecloginterval | 
                      ikelogging | strongcrlcheck | bootmode | bootexemptions) ]
         [ value = ] <integer> | <bootmode> | <bootexemptions> ]

  -��[ IPsec �v�Sxe0

�Sxe:

  j�            <P
  property       -l\'`
T1z0
  value          -
\�a�l\'`�v<P0

�P;�:    1. 	gHe�vl\'`<PS�b:
             ipsecdiagnostics - 0, 1, 2, 3, 4, 5, 6, 7
             ikelogging       - 0, 1
             strongcrlcheck   - 0, 1, 2
             ipsecloginterval - 60 0R 86400 �y
             ipsecexempt      - 0, 1, 2, 3
             bootmode         - stateful, block, permit
             bootexemptions   - none, "exemption#1 exemption#2 ... exemption#n"
                                __�-N�vW[2Nc�[��_j!j_-N8l`�AQ1��v�
�TS�[�#�
                                �c�Wn�U�<h_�YN:
                                  Protocol:SrcPort:DstPort:Direction
                                    vQ-N�protocol /f ICMP, TCP, UDP, RAW b <integer>
                                    � direction /f inbound b outbound
         2. ipsecdiagnostics0ikelogging0ipsecloginterval0bootmode � bootexemptions
            x���P�c�O�V�n�v�[KN(u0
\�e Windows Vista ��f�e�v\Omi�|q}!qHe0
         3. SrcPort � DstPort �S
\�e TCP � UDP Mb	gHe�
\�evQ�N�
�TS�[�A�MQ�v<h_
            /f Protocol:Direction0
         4. #��c�W-��[<P 0 �SAQ1��NUO#��c�W�vAmϑ0
         5. ikelogging � strongcrlcheck g�zsS_U�R; @b	gvQ�Nl\'`GRg(WN!k��_jBf
            MbuHe0

�{�O:     1. set config property=ipsecdiagnostics value=0
          2. set config property=bootmode value=stateful
          3. set config property=bootexemptions value=none
          4. set config property=bootexemptions
             value="ICMP:inbound TCP:80:80:outbound"

^

O(u�e_:
  rule [ srcaddr = ] (ip | dns | server)
       [ dstaddr = ] (ip | dns | server)
       [ protocol = ] (ANY | ICMP | TCP | UDP | RAW | <integer>)
       [ srcport = ] <port>
       [ dstport = ] <port>
       [ mirrored = ] (yes | no)
       [ conntype = ] (lan | dialup | all)
       [ [ srcmask = ] (mask | prefix) ]
       [ [ dstmask = ] (mask | prefix) ]
       [ [ tunneldstaddress = ] (ip | dns) ]
       [ [ mmpolicy = ] <string> ]
       [ [ qmpolicy = ] <string> ]
       [ [ actioninbound = ] (permit | block | negotiate) ]
       [ [ actionoutbound = ] (permit | block | negotiate) ]
       [ [ kerberos = ] (yes | no) ]
       [ [ psk = ] <preshared key> ]
       [ [ rootca = ] "<certificate> certmap:(yes | no) excludecaname:(yes | no)" ]

  (W SPD ��O9e��GR�Tܕo��v�{x�hV0

�Sxe:

  j�              <P
  srcaddr          - �O�n IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  dstaddr          -�v�v0W IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  protocol         -�S�N/f ANY0ICMP0TCP0UDP0RAW btexe0
  srcport          -�O�n#��c�W (0 �Nh��NUO#��c�W)
  dstport          -�v�v0W#��c�W (0 �Nh��NUO#��c�W)
  mirrored         -'Yes'g�^�ziQP�{x�hV��kP�eTNP0
  conntype         -#��}^��W
  srcmask          -�O�nMO@Wn�ib 1 0R 32 ���v���x0� rcaddr -��p�{
WGR
Ni�(u
  dstmask          -�v�v0WMO@Wn�ib 1 0R 32 ���v���x0� dstaddr -��p�{
WGR
Ni�(u
  tunneldstaddress -�S��v�v0W IP MO@Wb DNS 
T1z0
  mmpolicy         -;N��!j_�SGR
  qmpolicy         -�_�!j_�SGR
  actioninbound    -8�eQ\S�R\O
  actionoutbound   -8��Q\S�R\O
  kerberos         -�Y�gc�[�N'yes'GRg�c�O kerberos W�I�
  psk              -O(uc�[�v�HQqQ(uёp��O�c�OW�I�
  rootca           -O(uc�[�v9h�aI��O�c�OW�I���Y�gc�[�N certmap:Yes GRVf�
\�a�aI���Y�gc
                    �[�N excludecaname:Yes GR�cd� CA 
T1z0

�P;�:  1. �S�N-��[ Mmpolicy0qmpolicy0actioninbound0actionoutbound �T authmethods�vQ�NkMO
          /fX�%RCQ0
          2. :O
ghV^��W�S�N/f WINS0DNS0DHCP b GATEWAY
          3. �aI�0
\�a�T CA 
T1z-��[����(W__�gQ; (u \' �O�S�NgQL]___�0
          4. �S	g(W�}�Wb�TሑaI�
\�aMb	gHe0
          5. �S�NY!kO(u rootca �Sxe�O�c�OY͑�aI�0
          6. �kPW�I��e�l�v��^/f1u�[(W}T�Nሄv��^�Ozl�[�v0
          7. �Y�g�l	gc�[W�I��e�l�gO(u�RKa�-�<P0
          8. @b	gW�I��e�l��g��c�[�vn�U���[0
          9. �cd�9h�aI��c
k�UMO (CA) 
T1z�S2�bkr�
T1z��vub�aI���Bl�vN�R����Q0
         10. �Y�gc�[MO@W�{
W�GR�zޞ�_�/fyr�[�vMO@W (
N�S�N�pn�UbP[�}�) N�p�vT^��W (�ar�iQ���/f v4 biQ���/f v6)0

�{�O: 1. set rule srca=WINS dsta=0.0.0.0 srcmask=32 dstmask=32
             tunneldst=192.168.145.1
             proto=tcp srcport=80 dstport=80 mir=no con=lan
             qmp=qmp actionin=negotiate actionout=permit
          2. set rule srcaddr=192.168.145.110 dstaddr=192.168.145.215
             mmpolicy=mmp qmpolicy=qmp mirrored=no srcmask=32
             rootca="C=US,O=MSFT,CN=Microsoft Authenticode(tm) Root Authority"
             rootca="C=US,O=MSFT,CN=\'Microsoft North, South, East, and West
             Root Authority\' certmap:yes excludecaname:no"

PA�_ SPD �*Rd��SGR0�{x�hV��T�R\O0
�_ SPD �*Rd��_�!j_�SGR0
�_ SPD �*Rd�;N��!j_�SGR0
�_ SPD �*Rd���GR�T�vܕ�v�{x�hV0
�_ SPD �*Rd�@b	g�SGR��{x�hV�T�R\O0
PA�
O(u�e_:
  qmpolicy  [ name = ] <string> | [ all ]

  �_ SPD �*Rd��_�!j_�SGR0
  �Y�gc�[�N 'all'�g*Rd�@b	g�_�!j_�SGR0

�Sxe:

  j�    <P
  name   -�_�!j_�SGR
T1z0

�P;�:     �_�HQ*Rd��NUOܕo��v�_�!j_�{x�hVMb��*Rd��_�!j_�SGR0

�{�O:     delete qmpolicy name=qmp

�
O(u�e_:
  mmpolicy   [ name = ] <string> | [ all ]

  �_ SPD �*Rd�;N��!j_�SGR0
  �Y�gc�[�N 'all'�g*Rd�@b	g;N��!j_�SGR0

�Sxe:

  j�    <P
  name   -;N��!j_�SGR
T1z0

�P;�:     �_�HQ*Rd��NUOܕo��v;N��!j_�{x�hVMb��*Rd�;N��!j_�SGR0

�{�O:     delete mmpolicy name=mmp

P
O(u�e_:
  rule [ srcaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server)
       [ dstaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server)
       [ protocol = ] (ANY | ICMP | TCP | UDP | RAW | <integer>)
       [ srcport = ] <port>
       [ dstport = ] <port>
       [ mirrored = ] (yes | no)
       [ conntype = ] (lan | dialup | all)
       [ [ srcmask = ] (mask | prefix) ]
       [ [ dstmask = ] (mask | prefix) ]
       [ [ tunneldstaddress = ] (ip | dns) ]

  �_ SPD �*Rd���GR0

�Sxe:

  j�              <P
  srcaddr          -�O�n IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  dstaddr          -�v�v0W IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  protocol         -�S�N/f ANY0ICMP0TCP0UDP0RAW btexe0
  srcport          -�O�n#��c�W00 �Nh��NUO#��c�W0
  dstport          -�v�v0W#��c�W00 �Nh��NUO#��c�W0
  mirrored         -'Yes' g�^�ziQP�{x�hV��kP�eTNP0
  conntype         -#��}^��W�S�N/f lan0dialup b 'all'0
  srcmask          -�O�nMO@Wn�ib 1 0R 32 ���v���x0
  dstmask          -�v�v0WMO@Wn�ib 1 0R 32 ���v���x0
  tunneldstaddress -�S��v�v0W IP MO@Wb DNS 
T1z0

�P;�:  1. 傁�c�[�vMR��f�MO@W�ˊ-��[ srcaddr/dstaddr=me
             傁�c�[@b	g��f�MO@W�ˊ-��[ srcaddr/dstaddr=any
          2. :O
ghV^��W�S�N/f WINS0DNS0DHCP b GATEWAY
          3. �Y�g�]�}c�[MO@W�{
W��zޞ�_�/ff�x�vMO@W (
N�S�N�pn�UbP[�}�) N�p�vT^��W (�ar�iQ���/f v4 biQ���/f v6)0

�{�O: delete rule srca=192.168.145.110 dsta=192.168.145.215
          tunneldsta=192.168.145.1
          proto=tcp srcport=80 dstport=80 mirror=no conntype=lan

:
O(u�e_:
  all

  �_ SPD �*Rd�@b	g�SGR��{x�hV��TW�I��e�l0

�{�O: delete all

PA�_ SPD �o�:y�SGR0�{x�hV��T�R\O0
�_ SPD o�:y�SGR0�{x�hV0SA��Tq}�0
�_ SPD �o�:y;N��!j_�SGRs�0}nj
�0
PA�_ SPD �o�:y�_�!j_�SGRs�0}nj
�0
�_ SPD �o�:y;N��!j_�{x�hVs�0}nj
�0
�_ SPD �o�:y�_�!j_�{x�hVs�0}nj
�0
�_ SPD �o�:y IPsec �T IKE q}�0
�_ SPD �o�:y;N��!j_�[hQ'`ܕo�0
�_ SPD �o�:y�_�!j_�[hQ'`ܕo�0

o�:y IPsec -��[0
�_ SPD o�:y��GRs�0}0
�
O(u�e_:
  all [ [ resolvedns = ] (yes | no) ]

  o�:y@b	g SPD ሄv�SGR0�{x�hV�SA �Tq}��vs�0}nj
�0

�Sxe:

  j�              <P
  resolvedns       -'yes' go�:y㉐g�v DNS 
T1z0

�P;�:    resolvedns �v�-�<P/f no 0

�{�O:    show all yes
         - o�:y@b	gwQ	g DNS ㉐g�vnj
�

�
O(u�e_:
  mmpolicy [ name = ] <string> | [ all ]

  o�:y SPD ሄv;N��!j_�SGR�vs�0}nj
�0

�Sxe:

  j�    <P
  name   -;N��!j_�SGR
T1z0

�P;�:     �Y�gc�[�N 'all'�go�:y@b	g;N��!j_�SGR0

�{�O:     1. show mmpolicy name=mmp
          2. show mmpolicy all

�
O(u�e_:
  qmpolicy [ name = ] <string> | [ all ]

  o�:y SPD ሄv�_�!j_�SGR�vs�0}nj
�0

�Sxe:

  j�    <P
  name   -�_�!j_�SGR
T1z0

�P;�:     �Y�gc�[�N 'all'�go�:y@b	g�_�!j_�SGR0

�{�O:     1. show qmpolicy name=qmp
          2. show qmpolicy all

F
O(u�e_:
  mmfilter [ name = ] <string> | [ all ]
           [ [ type = ]  (generic | specific) ]
           [ [ srcaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server) ]
           [ [ dstaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server) ]
           [ [ srcmask = ] (mask | prefix) ]
           [ [ dstmask = ] (mask | prefix) ]
           [ [ resolvedns = ] (yes | no) ]

  o�:y�O� SPD ;N��!j_�{x�hV�vs�0}nj�e0

�Sxe:

  j�         <P
  name | all -;N��!j_�{x�hV
T1zb all 0
  type       -��o�:y�v�{x�hV^��W�specific b generic0
  srcaddr    -�O�n IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1z�b:O
ghV^��W0
  dstaddr    -�vj IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1z�b:O
ghV^��W0
  srcmask    -�O�nMO@Wn�ib���x�p 1 0R 320
  dstmask    -�vjMO@Wn�ib���x�p 1 0R 320
  resolvedns --��p 'yes' go�:y㉐g�v DNS 
T1z0

�P;�:     1. type �Sxe�-��p generic 0
          2. :O
ghV^��W�S�N/f WINS0DNS0DHCP b GATEWAY0
          3. �Y�gc�[�N 'all'�GRgo�:y@b	g;N��!j_�{x�hV0
          4. �Y�gc�[�N�O�nMO@Wb�vjMO@W�
             GR�Sgo�:yߍr�MO@W�vܕo��v�{x�hV0
          5. �Y�g�]�}c�[MO@W�{
W��zޞ�_�/ff�x�vMO@W (
N�S�N�pn�UbP[�}�) N�p�vT^��W (�ar�iQ���/f v4 biQ���/f v6)0

�{�O:     1. show mmfilter name=mmf
          2. show mmfilter all srcaddr=wins dstaddr=192.168.145.112

4
O(u�e_:
  qmfilter [ name = ] <string> | [ all ]
           [ [ type = ]  (generic | specific) ]
           [ [ srcaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server) ]
           [ [ dstaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server) ]
           [ [ srcmask = ] (mask | prefix) ]
           [ [ dstmask = ] (mask | prefix) ]
           [ [ protocol = ] (ANY | ICMP | TCP | UDP | RAW | <integer>) ]
           [ [ srcport = ] <port> ]
           [ [ dstport = ] <port> ]
           [ [ actioninbound = ] (permit | block | negotiate) ]
           [ [ actionoutbound = ] (permit | block | negotiate) ]
           [ [ resolvedns = ] (yes | no) ]

  o�:y SPD ሄv�_�!j_�{x�hV�vs�0}nj
�0

�Sxe:

  j�               <P
  name             -�_�!j_�{x�hV�v
T1z0
  type             -��o�:y�v�{x�hV^��W�specific b generic0
  srcaddr          -�O�n IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  dstaddr          -�v�v0W IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  srcmask          -�O�nMO@Wn�ib 1 0R 32 ���v���x0
  dstmask          -�v�v0WMO@Wn�ib 1 0R 32 ���v���x0
  protocol         -�S�N/f ANY0ICMP0TCP0UDP0RAW btexe0
  srcport          -�O�n#��c�W00 �Nh��NUO#��c�W0
  dstport          -�v�v0W#��c�W00 �Nh��NUO#��c�W0
  actioninbound    -8�eQ\S�R\O0
  actionoutbound   -8��Q\S�R\O0
  resolvedns       -<P 'yes' go�:y㉐g�v DNS 
T1z0

�P;�: 1. �*gc�[ type �Sxe�GRgo�:y'generic' �T
        'specific' �{x�hV0
     2. :O
ghV^��W�S�N/f WINS0DNS0DHCP b GATEWAY0
     3. �Y�g�]�}c�[MO@W�{
W��zޞ�_�/ff�x�vMO@W (
N�S�N�pn�UbP[�}�) N�p�vT^��W (�ar�iQ���/f v4 biQ���/f v6)0

�{�O: 1. show qmfilter name=qmf
     2. show qmfilter all srcaddr=192.134.135.133 proto=TCP
     3. �Y�gc�[�N 'all'�go�:y@b	g�_�!j_�{x�hV0
     4. �Y�gc�[�N�O�nMO@W
T1zb�v�v0WMO@W
T1z�
        �Sgo�:y�r�MO@Wܕo��v�{x�hV0

�
O(u�e_:
  stats [ [type =] (all | ike | IPsec) ]

  o�:y IPsec �T IKE q}��vs�0}nj
�0

�Sxe:

  j�      <P
  type     -IPsec0ike b all (go�:y IPsec �T ike)

�P;�:

�{�O:     1. show stats all
          2. show stats type=IPsec

�
O(u�e_:
  mmsas [ [ all ] ]
        [ [ srcaddr =] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server) ]
        [ [ dstaddr =] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server) ]
        [ [ format = ] (list | table) ]
        [ [ resolvedns = ] (yes | no) ]

  o�:yc�[MO@W�v;N��!j_�[hQ'`ܕo�0

�Sxe:

  j�          <P
  all         -o�:y@b	g;N��!j_�v�[hQ'`ܕo�0
  srcaddr     -�O�n IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1z�b:O
ghV^��W0
  dstaddr     -�vj IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1z�b:O
ghV^��W0
  format      -8�eQ0R��U^b(u Tab R��<h_8�eQ0
  resolvedns  -'yes' go�:y㉐g�v DNS 
T1z0

�P;�:     1. :O
ghV^��W�S�N/f WINS0DNS0DHCP b GATEWAY0
          2. �Y�g�]�}c�[MO@W�{
W��zޞ�_�/ff�x�vMO@W (
N�S�N�pn�UbP[�}�) N�p�vT^��W (�ar�iQ���/f v4 biQ���/f v6)0\             


�{�O:     1. show mmsas  
all
          2. show mmsas srca=192.168.145.110 dsta=192.168.145 
.215

Q
O(u�e_:
  qmsas [ [ all ] ]
        [ [ srcaddr =] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server) ]
        [ [ dstaddr =] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server) ]
        [ [ protocol = ] (ANY | ICMP | TCP | UDP | RAW | <integer>) ]
        [ [ format = ] (list | table) ]
        [ [ resolvedns = ] (yes | no) ]

  o�:yc�[MO@W�v�_�!j_�[hQ'`ܕo�0

�Sxe:

  j�        <P
  all        -o�:y@b	g�_�!j_�[hQ'`ܕo�0
  srcaddr    -�O�n IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  dstaddr    -�v�v0W IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  protocol   -�S�N/f ANY0ICMP0TCP0UDP0RAW btexe0
  format     -(W��U^
No�:yb�N Tab R��<h_8��Q0
  resolvedns -<P 'yes' go�:y㉐g�v DNS 
T1z0

�P;�:     1. :O
ghV^��W�S�N/f WINS0DNS0DHCP b GATEWAY0
          2. �Y�g�]�}c�[MO@W�{
W��zޞ�_�/ff�x�vMO@W (
N�S�N�pn�UbP[�}�) N�p�vT^��W (�ar�iQ���/f v4 biQ���/f v6)0

�{�O:     1. show qmsas all
          2. show qmsas srca=192.168.145.110 dsta=192.168.145.215

<
O(u�e_:
  config
  o�:y�vMR IPsec -��[�Sxe�v-��[0
�P;�:

�{�O: show config

�
O(u�e_:
  rule   [ [ type = ] (transport | tunnel) ]
         [ [ srcaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server) ]
         [ [ dstaddr = ] (ipv4 | ipv6 | ipv4-ipv4 | ipv6-ipv6 | dns | server) ]
         [ [ srcmask = ] (mask | prefix) ]
         [ [ dstmask = ] (mask | prefix) ]
         [ [ protocol = ] (ANY | ICMP | TCP | UDP | RAW | <integer>) ]
         [ [ srcport = ] <port> ]
         [ [ dstport = ] <port> ]
         [ [ actioninbound = ] (permit | block | negotiate) ]
         [ [ actionoutbound = ] (permit | block | negotiate) ]
         [ [ resolvedns = ] (yes | no) ]

  o�:y SPD ሗ_��GRs�0}nj
�0

�Sxe:

  j�              <P
  type             -��o�:y�v��GR^��W�transport b tunnel0
  srcaddr          -�O�n IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  dstaddr          -�v�v0W IP MO@W (ipv4 b ipv6)0MO@W�{
W0DNS 
T1zb:O
ghV^��W0
  srcmask          -�O�nMO@Wn�ib 1 0R 32 ���v���x0
  dstmask          -�v�v0WMO@Wn�ib 1 0R 32 ���v���x0
  protocol         -�S�N/f ANY0ICMP0TCP0UDP0RAW btexe0
  srcport          -�O�n#��c�W00 �Nh��NUO#��c�W0
  dstport          -�v�v0W#��c�W00 �Nh��NUO#��c�W0
  actioninbound    -8�eQ\S�R\O0
  actionoutbound   -8��Q\S�R\O0
  resolvedns       -<P 'yes' go�:y㉐g�v DNS 
T1z0

�P;�:     1. type �Sxe�v�-�<P/f'transport'0
          2. :O
ghV^��W�S�N/f WINS0DNS0DHCP b GATEWAY0
          3. �Y�gc�[�N�O�nMO@W
T1zb�v�v0WMO@W
T1z��Sgo�:y�r�MO@Wܕo��v��GR0
          4. �Y�g�]�}c�[MO@W�{
W��zޞ�_�/ff�x�vMO@W (
N�S�N�pn�UbP[�}�) N�p�vT^��W (�ar�iQ���/f v4 biQ���/f v6)0

�{�O:     1. show rule
           - o�:y transport � tunnel ��GR
          2. show rule type=transport srcaddr=192.134.135.133 proto=TCP



�SGRxe�v        : %1!d!
&X[>e@S                   : ,g_jX[>e@S <%1!s!>
&X[>e@S                   : ,g_jX[>e@S <%1!s!>
&X[>e@S                   : �}�WX[>e@S <%1!s!>
&X[>e@S                   : �}�WX[>e@S <%1!s!>
X[>e@S                   : ,g_jX[>e@S 
X[>e@S                   : �}�WX[>e@S 
`��z_jhV <%1!s!>,g_j_jhV <%1!s!>`��z�}�W <%1!s!>,g_j�}�W <%1!s!>,g_j��f�,g_j�}�W PA

�SGR
T1z            : %1!s!
-

��GRX�%R�x                : %1!d!,  GUID = %2!s!�{x�hVn�U
T1z        : %1!s!
�{x�hVn�U
T1z        : !q
PA�SGR
T1z            : %1!s!
�c�            : %1!s!
�c�            : !q
c>m               : /f
c>m               : &T
;N PFS             : /f
;N PFS             : &T
*�b�����       : %1!d! R�


��GRxe�v         : %1!d! 

��GRs�0}nj
�

------------
c>m               : /fFO/f AD �SGR��˄

��GR
T1z              : %1!s!

��GR
T1z              : !q

W�I��e�l (%1!d!)
�S��v�v0W IP MO@W : #��}^��W        : hQ�
#��}^��W        : @S�W�}�
#��}^��W        : �d_�
#��}^��W        : !q

�{x�hVn�Us�0}nj
�
------------------

(W�-��V�a��GR�
NX[(W�{x�hVn�U


�{x�hV�R\Os�0}nj
�
---------------------
PA
�P8���GRxe�v: %1!d!
�S���GRxe�v   : %1!d!_U�R              : /f
_U�R              : &T
E�]_U�R              : /f
Windows Vista �T��eHr,g�v Windows 
N/e�c�-��V�a��GR0dk�SGR
NguHe0
�{x�hV�R\O
T1z      : %1!s!
�{x�hV�R\O
T1z      : !q
�R\O                 : AQ1�
�R\O                 : \��
�R\O                 : �N�m�[hQ'`
AllowUnsecure(Fallback): /f
AllowUnsecure(Fallback): &T
8�eQ Passthrough    : /f
PA8�eQ Passthrough    : &T
�[hQ'`�e_xe�v: %1!d!4 AH                  ESP                 X[Yu (�y/kB) 
8 --                  ---                 ------------- 
QMPFS                  : YES
QMPFS                  : NO 
	KERBEROS
9h CA		: %1!s!
�HQqQ(uёp�	: %1!s!
!q

�{x�hVn�U
T1z        : %1!s!

�{x�hVn�U
T1z        : !q
�{x�hVxe�v       : %1!d!
�{x�hV

---------
GUID                   : %1!s!

N!k�O9e          : %1!s!
PA�O�n DNS 
T1z        : <b�v IP MO@W>
�O�n DNS 
T1z        : %1!s!
�O�n DNS 
T1z        : <�NUO IP MO@W>
+�O�n DNS 
T1z        : <A Specific IP Address>
*�O�n DNS 
T1z        : <A Specific IP Subnet>
�O�n DNS 
T1z        : !q
�v�v0W DNS 
T1z   : <b�v IP MO@W>
�v�v0W DNS 
T1z   : %1!s!
�v�v0W DNS 
T1z   : <�NUO IP MO@W>
'�v�v0W DNS 
T1z   : <A Specific IP Address>
&�v�v0W DNS 
T1z   : <A Specific IP Subnet>
�v�v0W DNS 
T1z   : !q
��PU�t               : /f
��PU�t               : &T
�O�n DNS 
T1z        : %1!s! ㉐g0R �v�v0W DNS 
T1z   : %1!s! ㉐g0R "�O�n DNS 
T1z        : < DNS :O
ghV >   
$�O�n DNS 
T1z        : < WINS :O
ghV >    
#�O�n DNS 
T1z        : < DHCP :O
ghV >   
�O�n DNS 
T1z        : < �-���S� >
 �v�v0W DNS 
T1z   : < DNS :O
ghV >     
 �v�v0W DNS 
T1z   : < WINS :O
ghV >    
�v�v0W DNS 
T1z   : < DHCP :O
ghV >   
�v�v0W DNS 
T1z   : < �-���S� >
	%1!-15s!	%1!s!%1!s!

, ... , PA�O�n IP MO@W      : <b�v IP MO@W> 
�O�n IP MO@W      : <�NUO IP MO@W> 
�O�n IP MO@W      : �O�nn�i            : �v�v0W IP MO@W : <b�v IP MO@W> 
�v�v0W IP MO@W : <�NUO IP MO@W> 
�v�v0W IP MO@W : �v�v0Wn�i       : �O�n#��c�W            : %1!d!
�O�n#��c�W            : �NUO
�v�v0W#��c�W       : %1!d!
�v�v0W#��c�W       : �NUO
 ㉐g0R %1!s!
 <DNS �gb�1YWe>
�O�n IP MO@W      : < DNS :O
ghV >   
!�O�n IP MO@W      : < WINS :O
ghV >    
 �O�n IP MO@W      : < DHCP :O
ghV >   
�O�n IP MO@W      : < �-���S� >
�v�v0W IP MO@W : < DNS :O
ghV >     
�v�v0W IP MO@W : < WINS :O
ghV >    
�v�v0W IP MO@W : < DHCP :O
ghV >   
�v�v0W IP MO@W : < �-���S� >
�O�n#��c�W�{
W      : %1!d!-%2!d!
�v�v0W#��c�W�{
W : %1!d!-%2!d!
PA�
�TS�[               : ICMP
�
�TS�[               : TCP
�
�TS�[               : UDP
�
�TS�[               : RAW
�
�TS�[               : �NUO
�
�TS�[               : %1!d!
;N��!j_�[hQ'`�e_��^
,;N��!j_X[Yug         : %1!d! R� / %2!d! �_�!j_�]\O���k
  �R�[     �[te'`      DH �D}
(  ----------     ---------      --------
    DES       
    3DES          SHA1          MD5           NO(1)             �ZԚ(2)          2048           PA

�O�n_jhV		: ,g_j��f� GPO �p <%1!s!>


�O�n�}�W		: %1!s!
DC 
T1z			: %1!s!
GPO 
T1z		: %1!s!
,g_j IPsec �SGR
T1z	: %1!s!
AD IPsec �SGR
T1z	: %1!s!
GPO DN			: %1!s!
GPO OU #�P}		: %1!s!
AD �SGR DN		: %1!s!
!,g_j IPsec �SGR�]c>m	: /f�FO/f AD �SGRck(W��˄-N
,g_j IPsec �SGR DN	: %1!s!
,g_j IPsec �SGR
T1z	: !q
AD IPsec �SGR
T1z	: !q
IPsec �SGR
T1z		: %1!s!
IPsec �SGR DN		: %1!s!
IPsec �SGR�]c>m	: /f
          �cd� CA 
T1z        : /f
          �cd� CA 
T1z        : &T
          Certmapping �]_U(u  : /f
PA          Certmapping �]_U(u  : &T
PA

�SGRxe�v        	 %1!d!


�SGRxe�v        : %1!d!
%X[>e@S                    ,g_jX[>e@S <%1!s!>
%X[>e@S                    ,g_jX[>e@S <%1!s!>
%X[>e@S                    �}�WX[>e@S <%1!s!>
%X[>e@S                    �}�WX[>e@S <%1!s!>
X[>e@S                 	 ,g_jX[>e@S
X[>e@S                 	 �}�WX[>e@S
�aI�0R3^6b
\�a	 /f
�aI�0R3^6b
\�a	 &T


�SGR
T1z            	 %1!s!


��GR
T1z              	 %1!s!
�lc�[�SGR
T1z
-

��GRX�%R�x                	 %1!d!,	GUID =	%2!s!
	%1!-23s!	�SGR
T1z            	 %1!s!
�c�            	 %1!s!
�c�            	 !q
c>m�N               	 /f
c>m�N               	 &T
;N PFS             	 /f
;N PFS             	 &T
*�b�����       	 %1!d! R�


��GRxe�v         	 %1!d! 

			 ��GRs�0}nj
�
			 ------------
 c>m�N               	 /fFO/f AD �SGR��˄
,

�SGR
T1z                     	��GR	    
N!k�O9e 	c>m
	%1!-32s!	/fFO/f AD �SGR��˄
  /f  
  &T   
@----------                      	-----	    ------------ 	------
&�SGR
T1z                     	��GR	    
N!k�O9e
8-----------                     	-----	    ------------
PA��GR
T1z              	 %1!s!
��GR
T1z              	 !q

W�I��e�l (%1!d!)
PA$
_U(u	     �{x�hVn�U   	   �{x�hV�R\O     	  W�I�A
-------	     ----------   	   ------------     	  --------------�S��v�v0W IP MO@W 	 !q
�S��v�v0W IP MO@W 	 #��}^��W        	 hQ�
#��}^��W        	 @S�W�}�
#��}^��W        	 �d_�
#��}^��W        	 
Nf

�{x�hVn�Us�0}nj
�
------------------

�{x�hV�R\Os�0}nj
�
--------------------
_U�R�N              	 /f
_U�R�N              	 &T
PA��GR
T1z              	 !q

  /f  	
   &T  	       !q        	 Kerb Cert Pre
�P8���GRxe�v	 %1!d!

�S���GRxe�v   	 %1!d!$
_U(u	     �{x�hVn�U   	   �{x�hV�R\O     	�S��zޞ?
-------	     ----------   	   ------------     	--------------7
  /f  
Windows Vista �T��eHr,g�v Windows 
N/e�c�-��V�a��GR0dk�SGR
NguHe0
E�]_U�R              	 /f
Windows Vista �T��eHr,g�v Windows 
N/e�c�-��V�a��GR0dk�SGR
NguHe0
PA�{x�hV�R\O
T1z      	 %1!s!
�{x�hV�R\O
T1z      	 !q
�R\O                 	 AQ1�
�R\O                 	 \��
�R\O                 	 �N�m�[hQ'`
8�eQ PassThrough    	 /f
8�eQ PassThrough    	 &T
AllowUnSecure(Fallback)	 /f
AllowUnSecure(Fallback)	 &T

�[hQ'`�e�l       
&  AH 	    ESP        	�y� 	    kBytes 
+  -- 	    ---        	------- 	    ------ 
QMPFS                  	 /f
QMPFS                  	 &T 
(�{x�hV�R\O
T1z                 	�R\O     	  
N!k�O9e
?-----------------                 	------     	  -------------
	%1!-38s!	           !q          	1��S   	@SJX    	
�_��N�m	!q     		%1!-23s!
	%1!-23s!	[MD5 ]	[SHA1]	[!q]	[!q � !q]	[MD5  ,PA[SHA1 ,[!q � DES ]	 3DES]	 !q]	PA%1!6u!  	%2!10u! 
	KERBEROS
ROOT CA                	 %1!s!
�HQqQ(uёp�          	 %1!s!
!q

�{x�hVn�U
T1z        	 %1!s!

�{x�hVn�U
T1z        	 !q
�{x�hV
5�{x�hVn�U
T1z                           	�{x�hV	     
N!k�O9e    
J---------------                           	-------	     -------------    
GUID                   	 %1!s!

N!k�O9e          	 %1!s!
�{x�hVxe�v       	 %1!d!
	%1!-45s!	PA!q	%1!s!
	 %1!5d! 	           !q          	/f 	&T  	JMir 	    �O�n     	   �O�nn�i     	  �v�v0W  	    �v�v0Wn�i    	 �
�TS�[ 	�O�n�
�TS�[	�v�v0W�
�TS�[
]--- 	 ------------- 	 ------------- 	 ------------- 	 ------------- 	-------	-------	-------
<  b�v IP MO@W >	
< �NUO IP MO@W >		  %1!3d!	  �NUO		  %1!3d!
  �NUO 
   DNS SERVER  	  WINS SERVER  	  DHCP SERVER  	DEFAULT GATEWAY	  %1!3d!-%2!3d!	  %1!3d!-%2!3d!
 ICMP 	 TCP 	 UDP 	 RAW 	 �NUO	OTHER	PA;N��!j_�[hQ'`�e_��^
);N��!j_X[Yug      	 %1!d! R� / %2!d! �_�!j_�]\O���k
  �R�['`	teT'`	DH �D}
  ----------	---------	--------
     DES 	
     3DES	   SHA1	   MD5 	        NO(1)   
        �ZԚ(2)        2048     PA


hs�z�{x�hV�R\O
---------------------------

hs�z�{x�hV�R\Oxe�v	 %1!d!

PA	
hs�z�{x�hVn�U
-------------------------

hs�z�{x�hVn�Uxe�v	 %1!d!
PA
�{x�hVn�Uxe�v   	 %1!d!


�{x�hVn�Uxe�v   : %1!d!


�{x�hV�R\Oxe�v 	 %1!d!


�{x�hV�R\Oxe�v : %1!d!

!�SGR '%1!s!' /fO(u-N0�`��/f�`��*Rd��U? (/f/&T) 
%�`�`��*Rd�@b	gߍ�P�SGRܕo��v�{x�hVn�U�T�{x�hV�R\O�U ? (/f/&T) 

*Rd�@b	g�{x�hVn�U ? (/f/&T)

*Rd�@b	g�{x�hV�R\O ? (/f/&T)
"�`�`��*Rd�ߍ�P��GRܕo��v�{x�hVn�U�T�{x�hV�R\O�U? (/f/&T) 
�`�x�[��*Rd�@b	g�SGR�U ? (/f/&T)


NR�SGR/��GRck(WO(u�[
(---------------------------------------
	��GR
T1z      : %1!s!
	��GR
T1z      : !q
PABf���ar�/f(W %1!d! �T %2!d! kBytes KN��
PA
�e�X�SGR�]�^�z�T�f�eb�R
ck(W�^�z
T1z�p '%1!s!' �v�e�X�SGR...
&ck(W�^�z
T1z�p '%1!s!' �v�e�X�SGR�T-��[�[0R '%2!s!'...
Bf���ar�/f(W %1!d! �T %2!d! kBytes KN��
�v�v0W IP MO@W�]vu\O/f 'me'
�O�n IP MO@W�]vu\O/f 'me'

�e�X��GR�]�^�z�T�f�eb�R
ck(W�^�z
T1z�p '%1!s!' �v�e�X��GR...
'ck(W�^�z
T1z�p '%1!s!' �v�e�X��GR�T-��[�[0R '%2!s!' ...
$:O
ghVMO@W^��WbMO@W^��W ME0ANY bMO@W�{
W!q�l���S��zޞc�[0
�`�`���^�z�e�X�SGR�U? (/f/&T) 
*�aI�0R3^6b
\�a�S��(W Active Directory �}�Wb�T_U(u0\�_��x��0
�aI�0R3^6b
\�a: /f
�aI�0R3^6b
\�a: &T
�Y�g2QX[/f�}�W�T�]c�[c>m�GR��� GPO 
T1z
�Y�gc�[ GPO 
T1z�h�:y�`/f(W�}�W�SGRX[>e@S�d\O0
PA�`�`���^�z�e�X��GR�U? (/f/&T) 
PA
IKE MM �SGR
T1z     : %1!s!<b�v IP MO@W> 
<�NUO IP MO@W>%1!s!
PA	 ICMP    	 TCP     	 UDP     	 RAW     	 ANY     
IKE ߎ SA X[Yug       : %1!u! �yWINS SERVER     DHCP SERVER     DNS SERVER      DEFAULT GATEWAY  [%1!S!]'Netsh ipsec' gQ�[�T�vj��f�
N�v�[0
;N��!j_�SGR!q�lO(u0
@bc�[�v;N��!j_�SGR!q�lO(u
$
�R�[ �[te'`  DH   X[Yug (Kb:�y)  QM P�6R �k MM?
---------- --------- ----  ------------------  --------------- !q    
 DES       
Nf  
 3DES       !q    
  MD5     
  SHA1    0  %1!-5lu!     %2!lu!:%3!lu!          %4!-10lu! 0  %1!-5lu!     %2!lu!:%3!lu!          1 (MMPFS) �_�!j_�SGR!q�lO(u0
@bc�[�v�_�!j_�SGR!q�lO(u

QM �N�m�SGR
T1z : %1!s!'
    �[hQ'`�e_       X[Yug (Kb:�y)   PFS DH -��[>
------------------------- --------------------- ------------
 AH[MD5]                  AH[SHA1]                 AH[NONE]                PA
 ESP[ DES,
 ESP[ ERR,
 ESP[3DES,
 ESP[NONE,MD5]           SHA1]          NONE]           NO (1)           <*gc>m>      %1!10lu!:%2!-10lu! |~b;N��!j_ ؚ (2048)       AH[ERR]                 ERR]            /���           PA	 AH[MD5] 	 AH[SHA1]	 AH[NONE]	 AH[ERR] MD5] SHA1]NONE]ERR] + �ZԚ (2)       

�{x�hV
T1z            : %1!s!PAj�n;N��!j_�{x�hV!q�lO(u0
yr�[;N��!j_�{x�hV!q�lO(u0
c�[�v;N��!j_�{x�hV!q�lO(u0


;N��!j_�{x�hV: N,� P
-------------------------------------------------------------------------------c�[�v 8��Q 8�eQ 
͑ϑ                 : %1!d!


%1!d! j�n�{x�hV

%1!d! yr0W8��Q�{x�hV

%1!d! yr�[8�eQ�{x�hVPA hQ�     LAN     �d_� 
Nf*g�wPA
#��}^��W               :
W�I��e�l               :
	�HQqQ(uёp�

	Kerberos
�[hQ'`�e_             : %1!d!(�-�)	NONE/	DES/		UNKNOWN/	3DES/NONE/MD5/SHA1/DH%1!lu!/%2!lu!/QMlimit=%3!lu! 
	PAj�n�_�!j_�{x�hV!q�lO(u0
yr�[�_�!j_�{x�hV!q�lO(u0
c�[�v�_�!j_�{x�hV!q�lO(u0

�_�!j_�{x�hV(�P8�): 
�P8���GR 
�S���GR 
MM �{x�hV
T1z          : %1!s!
QM �{x�hV
T1z          : %1!s!
;N��!j_�SGR           : %1!s!

%1!d! �P8��{x�hV


%1!d! �S��{x�hV


�_�!j_�{x�hV(�S�): ��GR!q�lO(u0

8�eQ�R\O               : Passthru
8�eQ�R\O               : �N�m
8�eQ�R\O               : \��
8�eQ�R\O               : 
Nf
8��Q�R\O              : Passthru
8��Q�R\O              : �N�m
8��Q�R\O              : \��
8��Q�R\O              : 
Nf  %1!-5lu!  
�S��O�n               : 
�S��v�v0W             : #�O�n#��c�W: %1!-4lu!   �v�v0W#��c�W: %2!-4lu! 
��PU�t               : /f
��PU�t               : &T
�_�!j_�SGR      : %1!s!
�
�TS�[               :
IKE q}�
-------------- 


IKE q}�!q�lO(u0
 
;N��!j_                    : %1!S! 
�_�!j_                    : %1!S!#
ߎ SA                       : %1!S! 
W�I�1YWe                    : %1!S!
O(u-N�d�S                  : %1!S!
O(u-N�c6e                  : %1!S! 
�d�S1YWe                    : %1!S! 
�c6e1YWe                    : %1!S! 
�P�1YWe                    : %1!S!PA
�d�SXMz'Y\                : %1!S!
�c6eXMz'Y\                : %1!S! 
�N�m1YWe                    : %1!S!
�c6e0R
Nck�x�v Cookie       : %1!S! 
=~qQ�d�S                    : %1!S!$
TotalGetSpi                 : %1!S!$
TotalKeyAdd                 : %1!S!$
TotalKeyUpdate              : %1!S!$
GetSpiFail                  : %1!S!$
KeyAddFail                  : %1!S!$
KeyUpdateFail               : %1!S!$
IsadbListSize               : %1!S!$
ConnListSize                : %1!S!
�c6e0R
Nck�x�v\S          : %1!S!



IPsec q}�
----------------
PA
IPsec q}�!q�lO(u0

O(u-Nܕo�                  : %1!S!"
xS	� SA                     : %1!S! 
�dnёp�                    : %1!S! 
ёp��e�X                    : %1!S! 
ёp�*Rd�                    : %1!S! 
{v�_j�x                    : %1!S!
O(u-N�S�                  : %1!S!

No��v SPI \S             : %1!S!
\S�l	g��[                : %1!S!
\S�l	gW�I�                : %1!S!
	g͑�e�WL�uP,n�v\S        : %1!S!
�]�P��v_j�[MOCQD}          : %1!S!
�]�c6e�v_j�[MOCQD}          : %1!S!
�]�P��vW�I�MOCQD}          : %1!S!
�]�c6e�vW�I�MOCQD}          : %1!S!
�]�P��v�P8�MOCQD}          : %1!S!
�]�c6e�v�P8�MOCQD}          : %1!S!
�]�P��vxS	�MOCQD}          : %1!S!
�]�c6e�vxS	�MOCQD}          : %1!S!

�]�P�0R�S��vMOCQD}        : %1!S!
�S���]�c�S�vMOCQD}        : %1!S!
Cookie ٖ
\            : %1!02x!
,{�N�e_            : !qDES3DES
NfMD5SHA1/%1!d!/%2!d!
W�I�!j_              : �HQqQ(uёp�DSS =|�zRSA =|�zRSA �R�[Kerberos
�O�n                 : 
�#��c�W %1!d!
ID                     : 
ID                     : %1!s!
�v�v0W            : ?
�v�v0W                                                 �[hQ'`�e_     H
                                                            �^�z�v�eg/Bf��   Q
--------------------------------------------------------  ---------------------- [ID:%1!-35s!]  
DNS: %1!-51S! [ID:%1!-35s!]  
ck(W|vL� CA             :%1!s!
c}                   :%1!02x!:/*                                          
  9h CA              : %1!s!%S(  )
9h CA        : %1!s!PA
IPsec ;N��!j_�[hQ'`ܕo�!q�lO(u0

(W %1!s! �v IKE ;N��!j_ SAc�[�v;N��!j_�[hQ'`ܕo�!q�lO(u0
	

�_�!j_ SA
--------------

IPsec �_�!j_�[hQ'`ܕo�!q�lO(u0
c�[�v�_�!j_�[hQ'`ܕo�!q�lO(u0
PA
�P8��{x�hV

�S��{x�hV


Nf

�SGR
T1z            : %1!s!
�O�nMO@W         : 
�v�v0WMO@W    : 
�
�TS�[               : %1!lu!
�O�n#��c�W            : %1!u!
�v�v0W#��c�W       : %1!u!
�eT              : 8�eQ
�eT              : 8��Q
�eT              : /���


O(u�v�c�O  

�
�TS�[               : ICMPPA
�
�TS�[               : TCP
�
�TS�[               : UDP
�
�TS�[               : RAW,
  AH(b/r)   ESP Con(b/r) ESP Int  PFS DH �D}/
---------- ------------- -------  ------------
\݈^��W     : IKE
\݈^��W     : vQ�N
�O�n UDP \݈#��c�W  : %1!u!
�v�v0W UDP \݈#��c�W    : %1!u!
TQ�{ޞ�y�NMO@W      : 
�
�TS�[               : �NUOPA  ()
IPsec -��[�Sxe
------------------------------
>IPsecDiagnostics       : %1!d![
\�e Windows Vista b�f�e�v\Omi�|q}��!qHe]
?IKElogging             : %1!d! [
\�e Windows Vista b�f�e�v\Omi�|q}��!qHe]
StrongCRLCheck         : %1!d!
>IPsecloginterval       : %1!d![
\�e Windows Vista b�f�e�v\Omi�|q}��!qHe]
>NLBSFlags              : %1!d![
\�e Windows Vista b�f�e�v\Omi�|q}��!qHe]
;�ej                  : %1!d![
\�e Windows Vista b�f�e�v\Omi�|q}��!qHe]
IPsecexempt            : %1!d!
>2048DHGroupId          : %1!d![
\�e Windows Vista b�f�e�v\Omi�|q}��!qHe]
PAIPsec :��ed\}���Q�{
W0�{
W/f 0 - 70
IKE Logging ���Q�{
W0�{
W/f 0 - 10
7_'Y CRL �j�gd\}���Q�{
W0�{
W/f 0 - 20
 IPsec �������]���Q�{
W0�{
W/f 60 - 864000
IPsec �d�d\}���Q�{
W0�{
W/f 0 - 30
(	g�N IPsec -��[�Sxe�l	g-��[)0
��_j!j_              : Stateful\��AQ1�
UDP       
TCP       
ICMP      
RAW       
ANY       
%1!3d!       PA%1!5d!     8�eQ8��Q �l	g��_j!j_A�MQ�N�
��_j!j_A�MQ�N�   :�
�TS�[  Src #��c�W  Dst #��c�W  �eT
(--------- --------- --------- ---------
AQ1�gY 1024 A�MQ�N�
PA, MD5(%1!02lu!/%2!-02lu!)   !q            !q   *SHA1(%1!02lu!/%2!-02lu!)   !q          !q     !q         !q           !q   %  !q         DES (%1!02lu!/%2!-02lu!)   !q         *g�w     #  !q       3DES(%1!02lu!/%2!-02lu!)   !q         !q         MD5     SHA1    !q     !q  certmap
excludecaname/f&TERR Win32[%1!05d!] : %2!s!ERR IPsec[%1!05d!] :                 : #ERR Win32[%1!05d!] : !qHe�v Win32 /����x
�\	gNP�_���Sxe\*gc�[
_xe
NT0ck�x���lˊ�g����f
�l	g�SGR(W�SGRX[>e@S

!q�l��_U�SGRX[>e@S
�l	g�{x�hV�R\O(W�SGRX[>e@S
�l	g�{x�hVn�U(W�SGRX[>e@S

T1z�p %1!s! �v�SGR
N(W�SGRX[>e@S
gQ�/����!qHe�vR�c�`�l0

\_xe '%1!s!' �/f!qHe�v�Sxe
c�[�v IP MO@W!qHe
@bf}�N�v dns 
T1z '%1!s!' (W DNS 
\�a1YWe
'%1!s!' (WdkgQ�[
N/f	gHe�vj�
'%1!s!' j��]�}X[(W
"�l	g_xe 'assign = y/n' GPOname 1\!q�lc�[
@bf}�N�v}T�N���j� 'Name' b 'GUID'
��� '%1!s!' j�

\j� '%2!s!' �� '%1!s!' /f!qHe�v_xe
���x�ar��P�N�e 1 �T 32
'%1!s!' 
N/f	gHe�vn�i/���x 

@b�c�O�v_xe/f null
2@bc�[�vX[Yug 'Seconds' ���QP�6R0�[�ar��N�e '%1!d!' �T '%2!d!' KN��
.c�[�v 'Kbytes' ���QP�6R0�[�ar��N�e '%1!d!' �T '%2!d!' KN�� 
Rekey �UMO (k/s) !qHe
c�[!qHe�v HASH _xe
c�[
N�[te�v ESP
'%1!s!' �v Algo's c�[͑�
!q�N
NAQ1�!q
 c�[!qHe�v IPsec �
�TS�[0�[�ar��P/f ESP b AH
�]�}��N�g'Y OFFERS xe [%1!d!]
GQM_OFFERS !qHe0
NAQ1� Encryption+Encryption b Authentication+Authentication
QMOffers �vX[Yugbc�[nj�e!qHe0
�p MMOFFER c�[�v PFS �D}!qHe
P1 �D}z�1Y
c�[!qHe�v MMOFFER
�jHh
T1z�_��SS+T .ipsec oR�j
T
'%1!s!' �T ALL 
NAQ1�

*gc�[�HQqQ(uёp�
c�[!qHe�v Authmethod 
c�[!qHe�v�aI�
c�[YP '%1!s!' �Sxe0�S��AQ1�NP0

c�[�v#��c�W!qHe0

_xe�vxe�v�Y���*b�e�v
c�[!qHe�v QMOFFER
c�[!qHe�v�S� IP
�l	g�O�nb�v�v0WMO@W1\!q�lc�[�
�TS�[
c�[�vP[�}�n�i!qHe
!qj�_xe�S��/f��f�b�}�W
$ERR WIN32[00014] : �l	g�� Y�v��aԚ�O�[b�P�d\O0
c�[�v#��c�W!qHe0�[�ar��S\�e '%1!d!'
PAz�1Y�SGR
T1z
*�b������ar�(W %1!d! �T %2!d! R�KN��
�_�!j_P�6R�ar�(W %1!d! �T %2!d! �]\O���kKN��
X[Yug�ar�(W %1!d! �T %2!d! R�KN��
�SGR '%1!s!' �]�}X[(W
PA�ReQ�-��V�a��GRBf"uu/���
�^�z�SGR '%1!s!' Bf"uu/���
)1u�e(W	�eQ�-� auth �e�lBf1YWe�@b�N�^�z�SGR '%1!s!' Bf"uu/��� 
z�1Y FilterList 
T1z
FilterList 
T1z '%1!s!' �]�}X[(W
FilterList 
T1z '%1!s!'Bf"uu/���
c�[!qHe�v GUID
�^�zc�[�v�{x�hVBf"uu/���
FilterAction '%1!s!' �]�}X[(W
�^�z FilterAction '%1!s!' Bf"uu/���
\Permit b Block ^��W�v FilterAction -N Inpass�Qmpfs�Soft �T Qmsec x��!qHe0�`�_�c�[ 'action = negotiate'
�\�_�c�[NP�_�!j_�[hQ'`�e�l
��GR
T1zz�1Y
FilterAction 
T1zz�1Y

T1z�p '%1!s!' �v�SGR
NX[(W
 
T1z�p '%1!s!' �v��GR�]�}X[(W�SGR '%2!s!' -N

T1z�p '%1!s!' �v FilterAction 
NX[(W
!(W FilterList -N�l	g
T1z�p '%1!s!' �v�{x�hV
�^�z
T1z�p '%1!s!' �v��GRBf"uu/���

z�1Y��GR
T1zb��GRX�%R�x
GUID %1!s! �v�SGR
NX[(W
GUID %1!s! �v FilterAction 
NX[(W
(1u�e(W	�eQ�-� auth �e�lBf1YWe�@b�N�^�z��GR '%1!s!' Bf"uu/���
	�aI�㉼x�d\O1YWe

T1z�p '%1!s!' �v�SGR
NX[(W�sX[��f��}�W-N
c�[!qHe�v�S� IP MO@W
FilterList 
T1z '%1!s!' 
NX[(W
:O
ghV
N��TBf���O�n�T�v�vٖ�e@bc�[
GUID %1!s! �v FilterList 
NX[(W
	�l	g�v�
g�R�S(u

T1z�p '%1!s!' �v GPO �l	gX[(W�vMR�v��f��}�W
*(Wc>m�SGR0R
T1z�p '%1!s!' �v GPO Bf"uu/���bc�[�v GPO 
NX[(W
�f�e
T1z�p '%1!s!' �v�SGRBf"uu/���
�f�e GUID %1!s! �v�SGRBf"uu/���
PA+�_
T1z�p '%1!s!' �v GPO �d�c>m�SGRBf"uu/���bc�[�v GPO 
NX[(W
!�f�e
T1z�p '%1!s!' �v FilterList Bf"uu/���
$�f�e
T1z�p GUID %1!s! �v FilterList Bf"uu/���
#�f�e
T1z�p '%1!s!' �v FilterAction Bf"uu/���
PA#�f�e GUID %1!s! �v FilterAction Bf"uu/���

T1z�p '%1!s!' �v��GR
NX[(W�SGR '%2!s!'-N
�f�e
T1z�p '%1!s!' �v��GRBf"uu/���
%�-���GR!q�l�f�e�P}T�N0ˊO(u}T�N 'set defaultrule'
X�%R�x�p %1!d! �v��GR
NX[(W�SGR '%2!s!' -N
c�[!qHe�v��GRX�%R�x
�f�e
T�p '%1!s!' �SGR-N�v�-���GRBf"uu/���
	�l	gc�[�jHh
T1z
!qHe�v�jHh/_
T1z

/SeQ�SGRBf"uu/���
PA
/S�Q�SGRBf"uu/���
���S�-��SGRBf"uu/���
�P}T�N�S	g(W,g_j2QX[@S
N�S(u
�}�W
T1z!qHe0
T1z�p '%1!s!' �v�}�W
NX[(W
�`�v��f�
N/f�}�Wb�T
PA*Rd�
T1z�p '%1!s!' �v�SGRBf"uu/���
�l	g
T1z�p '%1!s!' �v�SGR
!q�l*Rd�
T1z�p '%1!s!' �v FilterList *Rd�
T1z�p '%1!s!' �v FilterList Bf"uu/����l	g
T1z�p '%1!s!' �v FilterList
%�]c�[gQ�[�v�{x�hV
N(W
T�p '%1!s!' �v FilterList gQ
-*Rd�c�[gQ�[�v�{x�hV�_�(W�f�e
T�p '%1!s!' �v FilterList Bf"uu/���
!q�l*Rd�
T1z�p '%1!s!' �v FilterAction"*Rd�
T1z�p '%1!s!' �v FilterAction Bf"uu/����l	g
T1z�p '%1!s!' �v FilterAction
*Rd�
T1z�p '%1!s!' �v��GRBf"uu/���
*Rd�X�%R�x�p %1!d! �v��GRBf"uu/���
!q�l*Rd��-��V�a��GR
�l	g
T1z�p '%1!s!' �v��GR
�l	gX�%R�x�p %1!d! �v��GR
	�l	gc�[�SGR
T1z
�l	g
T1z�p '%1!s!' �v�SGR
"ck(WU\��
T�p '%1!s!' �SGR�v NegPol nj
�Bf"uu/���
ck(WU\��
T�p '%1!s!' �SGR�v�{x�hVnj
�Bf"uu/���
"ck(WU\��
T�p '%1!s!' �SGR�v ISAKMP nj
�Bf"uu/���
�l	g
T1z�p '%1!s!' �v��GR
�l	gX�%R�x�p %1!d! �v��GR
PA
�l	g�vMRc>m�v�SGR
�l	g FilterList X[(W�SGRX[>e@S
�l	g FilterAction X[(W�SGRX[>e@S
!qHe�v GPO 
T1zb/f�l	g�vMRc>m�v�SGR
O(u�}�W2QX[@SBf�_�c�[
T1z
c�[!qHe�v�O�n IP MO@W
c�[!qHe�v�O�n IP/Mask
MO@W]��z0�O�n�T�v�v
N��	g�vT�v IP/DNS
	c�[!qHe�v:O
ghV
�_�c�[:O
ghV
c�[!qHe�v�v�v IP MO@W

c�[!qHe�v�v�vn�i
 !qHe�v Newname0
T1z�p '%1!s!' �v�SGR�]�}X[(W
 !qHe�v Newname0
T1z�p '%1!s!' �v��GR�]�}X[(W
*!qHe�v Newname0
T1z�p '%1!s!' �v Filterlist �]�}X[(W
,!qHe�v Newname0
T1z�p '%1!s!' �v Filteraction �]�}X[(W
�Y�gc�[^��W�1\�_�c�[ 'all'
���d\O"uugQ�/���
(W�SGR '%1!s!' -N�l	g�S�^��W�v��GRX[(W
2�P}T�N
NAQ1��f�e�-� Filteraction0ˊ(u 'Set DefaultRule' }T�N0
"
T1z�p '%1!s!' �v�SGR	g READONLY l\'`0�bU}�f�e
c�[�v��GR	g READONLY l\'`0�bU}�f�e
.
T1z�p '%1!s!' �v Filteraction 	g READONLY l\'`0�bU}�f�e
,
T1z�p '%1!s!' �v FilterList 	g READONLY l\'`0�bU}�f�e
"
T1z�p '%1!s!' �v�SGR	g READONLY l\'`0�bU}*Rd�
"
T1z�p '%1!s!' �v��GR	g READONLY l\'`0�bU}*Rd�
PA.
T1z�p '%1!s!' �v Filteraction 	g READONLY l\'`0�bU}*Rd�
,
T1z�p '%1!s!' �v FilterList 	g READONLY l\'`0�bU}*Rd�
O(u,g_j2QX[@SBf
N��c�[
T1z
(Windows Vista �T��eHr,g�v Windows 
N/e�c�-��V�a��GR0
PA?vu ActionInbound b ActionOutbound c�[�p NEGOTIATE Bf��_�	g QMPolicy0
,
#��c�W_��x
\ TCP b UDP �
�TS�[	gHe��l	g PortNumber �N�S|~�~
c�[�v QMPolicy 
NX[(W0
c�[�v MainMode �SGR
NX[(W0
?vu ActionInbound b ActionOutbound c�[�p NEGOTIATE Bf��_�	g QMPolicy0
A�Y�g ActionInbound b ActionOutbound ��*gc�[�p NEGOTIATE�1\
N��	g IPsec �SGR0
Mirror = Yes 
\�S���GR!qHe0
PAc�[�v MainMode �{x�hV
NX[(W0

c�[�v�P8��{x�hV
NX[(W0

c�[�v�S��{x�hV
NX[(W0
!q�lO(u MainMode �SGR0
!q�lO(u QuickMode �SGR0
@bf}�N
T1z�v MainMode �SGR�]�}X[(W0
@bf}�N
T1z�v QuickMode �SGR�]�}X[(W0
PAc�[�v MainMode �SGR
NX[(W0
c�[�v QMPolicy 
NX[(W0
MainMode �{x�hV
NX[(W0
c�[�v MainMode �{x�hV
NX[(W�N~b
N0R�SGR0
+c�[�v MainMode �SGR
NX[(Wb/f�Tc�[�v MainMode �{x�hV�l	gܕ#�0
c�[�v MainMode �{x�hV
NX[(W0
QuickMode �{x�hV
NX[(W0
PAc�[�v QuickMode �{x�hV
NX[(W&NN~b
N0R�SGR0
*c�[�v QuickMode �SGR
NX[(Wb/f�T QuickMode �{x�hV�l	gܕ#�0
c�[�v QuickMode �{x�hV
NX[(W0

�]�}(uN�W�I��e�l0
!q�l*Rd� %1!d! MMFilter ir�N0
!q�l*Rd� %1!d! K�8��{x�hVir�N0
!q�l*Rd� %1!d! �S��{x�hVir�N0
IPsec �SGR�Nt
g�R�l	g_U�R0


�SGR�Nt
g�R_U�Rb�R0

R�ghV�v
kVg/�����ar��p IPSEC�IKE b ALL0
�_R�ghV�c6e0R!qHe�v AddressType0
�O�n�T�v�viQ�
N���p:O
ghV0
�S��O�n�T�S��v�viQ�
N���p:O
ghV0
PA�4VS_VERSION_INFO��
{aJ
{aJ?StringFileInfo�040404B0LCompanyNameMicrosoft CorporationPFileDescription�}kd\ IP �[hQ'`TS�Rz_ DLLn'FileVersion10.0.19041.7291 (WinBuild.160101.0800):
InternalNamenshipsec.dll�.LegalCopyright� Microsoft Corporation. All rights reserved.JOriginalFilenamenshipsec.dll.muij%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.19041.7291DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX