IpSecConfig.efi -? -b
Displays or modifies the current IPsec configuration.
IpSecConfig [-p {SPD|SAD|PAD}] [command] [options[parameters]]
-p (SPD|SAD|PAD) required.point to certain policy database.
command: -a [options[parameters]] Add new policy entry. -i entryid [options[parameters]] Insert new policy entry before the one matched by the entryid. It's only supported on SPD policy database. -d entryid Delete the policy entry matched by the entryid. -e entryid [options[parameters]] Edit the policy entry matched by the entryid. -f Flush the entire policy database. -l List all entries for specified database. -enable Enable IPsec. -disable Disable IPsec. -status Show IPsec current status.
[options[parameters]] for SPD: --local localaddress optional local address --remote remoteaddress required remote address --proto (TCP|UDP|ICMP|...) required IP protocol --local-port port optional local port for tcp/udp protocol --remote-port port optional remote port for tcp/udp protocol --name name optional SPD name --action (Bypass|Discard|Protect) required required IPsec action --mode (Transport|Tunnel) optional IPsec mode, transport by default --ipsec-proto (AH|ESP) optional IPsec protocol, ESP by default --auth-algo (NONE|SHA1HMAC) optional authentication algorithm --encrypt-algo(NONE|DESCBC|3DESCBC)optional encryption algorithm --tunnel-local tunnellocaladdr optional tunnel local address(only for tunnel mode) --tunnel-remote tunnelremoteaddr optional tunnel remote address(only for tunnel mode)
[options[parameters]] for SAD: --spi spi required SPI value --ipsec-proto (AH|ESP) required IPsec protocol --local localaddress optional local address --remote remoteaddress required destination address --auth-algo (NONE|SHA1HMAC) required for AH. authentication algorithm --auth-key key required for AH. key for authentication --encrypt-algo (NONE|DESCBC|3DESCBC) required for ESP. encryption algorithm Press ENTER to continue or 'Q' break: --encrypt-key key required for ESP. key for encryption --mode (Transport|Tunnel) optional IPsec mode, transport by default --tunnel-dest tunneldestaddr optional tunnel destination address(only for tunnel mode) --tunnel-source tunnelsourceaddr optional tunnel source address(only for tunnel mode)
[options[parameters]] for PAD: --peer-address address required peer address --auth-proto (IKEv1|IKEv2) optional IKE protocol, IKEv1 by default --auth-method (PreSharedSecret|Certificates) required authentication method --auth-data authdata
FS0:NetworkTools> VConfig.efi -? Display or modify VLAN configuration for network interface.
VCONFIG [-?] [-l [IfName]] [-a IfName VlanId [Priority]] [-d IfName.VlanId]
-l Display VLAN configuration for all or specified interface. -a Add a VLAN device for the network interface. -d Delete a VLAN device. IfName Name of network interface, e.g. eth0, eth1. VlanId Unique VLAN identifier (0~4094). Priority 802.1Q priority level (0~7), default 0.
Examples: * To display VLAN configuration: fs0:> vconfig -l fs0:> vconfig -l eth0 * To add VLAN device: fs0:> vconfig -a eth0 1000 fs0:> vconfig -a eth0 2000 7 * To delete VLAN device: fs0:> vconfig -d eth0.1000