popd
# End of 6to4 configuration
# ----------------------------------
# ISATAP Configuration
# ----------------------------------
pushd interface isatap
popd
# End of ISATAP configuration
#========================
# Port Proxy configuration
#========================
pushd interface portproxy
reset
popd
# End of Port Proxy configuration
# ----------------------------------
# TCP Configuration
# ----------------------------------
pushd interface tcp
reset
set global rss=enabled chimney=enabled autotuninglevel=normal congestionprovider
=ctcp ecncapability=disabled timestamps=disabled netdma=enabled dca=enabled
popd
# End of TCP configuration
# ----------------------------------
# Teredo Configuration
# ----------------------------------
pushd interface teredo
set state type=client servername=teredo.ipv6.microsoft.com. servervirtualip=0.0.
0.0
popd
# End of Teredo configuration
# ----------------------------------
# 6to4 Configuration
# ----------------------------------
pushd interface 6to4
reset
popd
# End of 6to4 configuration
# ------------------------------------
# Bridge configuration (not supported)
# ------------------------------------
# ------------------------------------
# End of Bridge configuration
# ------------------------------------
# ----------------------------------------
# Wired LAN Configuration
# ----------------------------------------
pushd lan
popd
# End of Wired LAN Configuration.
Mobile Broadband configuration dump is not supported
# ==========================================================
# Health Registration Authority configuration
# ==========================================================
pushd nap hra
popd
# End of NAP HRA configuration
# ==========================================================
# Network Access Protection client configuration
# ==========================================================
pushd nap client
# ----------------------------------------------------------
# Trusted server group configuration
# ----------------------------------------------------------
reset trustedservergroup
# ----------------------------------------------------------
# Cryptographic service provider (CSP) configuration
# ----------------------------------------------------------
set csp name = "Microsoft RSA SChannel Cryptographic Provider" keylength = "2048
"
# ----------------------------------------------------------
# Hash algorithm configuration
# ----------------------------------------------------------
set hash oid = "1.3.14.3.2.29"
# ----------------------------------------------------------
# Enforcement configuration
# ----------------------------------------------------------
set enforcement id = "79617" admin = "disable" id = "79619" admin = "disable" id
= "79621" admin = "disable" id = "79623" admin = "disable"
# ----------------------------------------------------------
# Tracing configuration
# ----------------------------------------------------------
set tracing state = "disable" level = "basic"
# ----------------------------------------------------------
# User interface configuration
# ----------------------------------------------------------
reset userinterface
popd
# End of NAP client configuration
# -----------------------------------------
# Remote Access Configuration
# -----------------------------------------
pushd ras
set authmode mode = standard
delete authtype type = PAP
delete authtype type = MD5CHAP
delete authtype type = MSCHAPv2
delete authtype type = EAP
delete authtype type = CERT
add authtype type = MSCHAPv2
delete link type = SWC
delete link type = LCP
add link type = SWC
add link type = LCP
delete multilink type = MULTI
add multilink type = MULTI
set conf confstate = disabled
set type ipv4rtrtype = lananddd ipv6rtrtype = none rastype = ipv4
set wanports device = "WAN Miniport (SSTP)" rasinonly = disabled ddinout = disab
led ddoutonly = disabled maxports = 2
set wanports device = "WAN Miniport (PPTP)" rasinonly = disabled ddinout = disab
led ddoutonly = disabled maxports = 2
set wanports device = "WAN Miniport (PPPOE)" ddoutonly = disabled
set wanports device = "WAN Miniport (L2TP)" rasinonly = disabled ddinout = disab
led ddoutonly = disabled maxports = 2
set wanports device = "WAN Miniport (IKEv2)" rasinonly = disabled ddinout = disa
bled ddoutonly = disabled maxports = 2
set user name = Administrator dialin = policy cbpolicy = none
set user name = ASPNET dialin = policy cbpolicy = none
set user name = Ghost dialin = policy cbpolicy = none
set ikev2connection idletimeout = 5 nwoutagetime = 30
set ikev2saexpiry saexpirytime = 480 sadatasizelimit = 100
popd
# End of Remote Access configuration.
# -----------------------------------------
# Remote Access Diagnostics Configuration
# -----------------------------------------
pushd ras diagnostics
set rastracing component = * state = disabled
set modemtracing state = disabled
set cmtracing state = disabled
set securityeventlog state = enabled
set loglevel events = warn
popd
# End of Remote Access Diagnostics Configuration.
# -----------------------------------------
# Remote Access IP Configuration
# -----------------------------------------
pushd ras ip
delete pool
set negotiation mode = allow
set access mode = all
set addrreq mode = deny
set broadcastnameresolution mode = enabled
set addrassign method = auto
set preferredadapter
popd
# End of Remote Access IP configuration.
# -----------------------------------------
# Remote Access IPv6 Configuration
# -----------------------------------------
pushd ras ipv6
set negotiation mode = deny
set access mode = all
set routeradvertise mode = enabled
popd
# End of Remote Access IPv6 configuration.
# -----------------------------------------
# Remote Access AAAA Configuration
# -----------------------------------------
pushd ras aaaa
popd
# End of Remote Access AAAA configuration.
# -----------------------------------------
# WinHTTP Proxy Configuration
# -----------------------------------------
pushd winhttp
reset proxy
popd
# End of WinHTTP Proxy Configuration
# ----------------------------------------
# Wireless LAN configuration
# ----------------------------------------
pushd wlan
# Allow filter list
# ----------------------------------------
# Block filter list
# ----------------------------------------
popd
# End of Wireless LAN Configuration
