deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-14 06:17:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

revised examples

Browse Source
This commit is contained in:
Justin Hall 2018-02-02 12:53:52 -08:00
parent 2090a58abd
commit 90fa997a65
1 changed files with 5 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
windows/access-protection/vpn/how-to-configure-diffie-hellman-protocol-over-ikev2-vpn-connections.md
View File

@ -13,11 +13,11 @@ ms.date: 01/29/2018
# How to configure Diffie Hellman protocol over IKEv2 VPN connections # How to configure Diffie Hellman protocol over IKEv2 VPN connections
**Applies to** **Applies to**
- Windows 10 - Windows 10, Windows 8.1, Windows 8, Windows 7
- Windows Server - Windows Server
In IKEv2 VPN connections, the default configuration for Diffie Hellman group is Group 2, which is not secure for IKE exchanges. In IKEv2 VPN connections, the default configuration for Diffie Hellman group is Group 2, which is not secure for IKE exchanges.
To secure VPN connections, update the VPN configuration by running VPN cmdlets with the CustomPolicy parameter. To secure the connections, update the configuration of VPN servers and clients by running VPN cmdlets.
For VPN server, you need to configure the tunnel type. This makes all IKE exchanges on IKEv2 tunnel use the secure configuration. For VPN server, you need to configure the tunnel type. This makes all IKE exchanges on IKEv2 tunnel use the secure configuration.
@ -33,15 +33,10 @@ On a VPN server that runs Windows Server 2012 R2, run [Set-VpnServerIPsecConfigu
Set-VpnServerIPsecConfiguration -CustomPolicy Set-VpnServerIPsecConfiguration -CustomPolicy
``` ```
For VPN client, youy need to configure each VPN connection. For VPN client, you need to configure each VPN connection.
For example, on a VPN client that runs Windows 10, run [Set-VpnConnectionIPsecConfiguration (version 4.0)](https://docs.microsoft.com/powershell/module/vpnclient/set-vpnconnectionipsecconfiguration?view=win10-ps): For example, on a VPN client that runs Windows 10, run [Set-VpnConnectionIPsecConfiguration (version 4.0)](https://docs.microsoft.com/powershell/module/vpnclient/set-vpnconnectionipsecconfiguration?view=win10-ps) and specify the name of the connection:
```powershell ```powershell
Set-VpnConnectionIPsecConfiguration Set-VpnConnectionIPsecConfiguration -ConnectionName <String>
``` ```
On a VPN server that runs Windows Server 2012 R2, run [Set-VpnConnectionIPsecConfiguration (version 3.0)](https://technet.microsoft.com/library/dn262642(v=wps.630).aspx):
```powershell
Set-VpnConnectionIPsecConfiguration
```