deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-23 14:23:38 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Added more details about WS2012

Browse Source
This commit is contained in:
shortpatti
2018-02-08 14:40:32 -08:00
parent df9a7ae620
commit 5636af8787
1 changed files with 3 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md
View File

@ -8,7 +8,7 @@ ms.pagetype: security, networking
author: shortpatti author: shortpatti
ms.author: pashort ms.author: pashort
ms.localizationpriority: medium ms.localizationpriority: medium
ms.date: 02/06/2018 ms.date: 02/08/2018
--- ---
# How to configure Diffie Hellman protocol over IKEv2 VPN connections # How to configure Diffie Hellman protocol over IKEv2 VPN connections
@ -20,16 +20,13 @@ To secure the connections, update the configuration of VPN servers and clients b
## VPN server ## VPN server
For VPN server, you need to configure the tunnel type. This makes all IKE exchanges on IKEv2 tunnel use the secure configuration. For VPN servers that run Windows Server 2012 R2 or later, you need to run [Set-VpnServerConfiguration](https://docs.microsoft.com/powershell/module/remoteaccess/set-vpnserverconfiguration?view=win10-ps) to configure the tunnel type. This makes all IKE exchanges on IKEv2 tunnel use the secure configuration.
For example, on a site-to-site VPN server that runs Windows Server 2012 R2 or later, run [Set-VpnServerConfiguration](https://docs.microsoft.com/powershell/module/remoteaccess/set-vpnserverconfiguration?view=win10-ps):
```powershell ```powershell
Set-VpnServerConfiguration -TunnelType IKEv2 -CustomPolicy Set-VpnServerConfiguration -TunnelType IKEv2 -CustomPolicy
``` ```
On an earlier version of Windows Server, run [Set-VpnServerIPsecConfiguration](https://technet.microsoft.com/library/hh918373(v=wps.620).aspx): On an earlier versions of Windows Server, run [Set-VpnServerIPsecConfiguration](https://technet.microsoft.com/library/hh918373(v=wps.620).aspx). Since `Set-VpnServerIPsecConfiguration` doesn’t have `-TunnelType`, the configuration applies to all tunnel types on the server.
<!-- this is where we need the correct information -->
```powershell ```powershell
Set-VpnServerIPsecConfiguration -CustomPolicy Set-VpnServerIPsecConfiguration -CustomPolicy