I wanted a way to add and remove a specific IP to an existing IPSec policy using the command prompt in Server 2008 Standard. I was directed to use the 'netsh' command, yet there are dozens of subcommands for this. I was told to use the 'add crp' command, but I am not sure if this is related to the IPSec snap-in. I need to know the syntax of the appropriate command to do the below. Conditions of the syntax needs to be: Add specific IP from existing IPSec policy. Mirrored A specific IP Address (or Subnet) My IP Address Any Protocol Any Port Must be able to remove this filter from policy. The link to the netsh advfirewall which I found: http://technet.microsoft.com/en-us/libra… Link for add crp command, but if this doesn't reflect with the IPSec policy management MMC, then I don't want to use it. http://technet.microsoft.com/es-es/libra… Thanks!Randall

Hi, To modify IPSec policy, please refer to the following article: Netsh commands for Internet Protocol security http://technet.microsoft.com/en-us/library/cc739550(WS.10).aspx Creating, modifying, and assigning IPSec policies http://technet.microsoft.com/en-us/library/cc738367(WS.10).aspx Thanks This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.