nshwfp.dll.mui Windows 筛选平台 Netsh 帮助程序 49951aa2501e0e20d3447f4e47869643

File info

File name: nshwfp.dll.mui
Size: 41984 byte
MD5: 49951aa2501e0e20d3447f4e47869643
SHA1: dd62acb311eb2691975e59cf731105bac285d738
SHA256: fcd0a4be34c5a6f864e9c368115d45cdee1cdbce3debfd34678b31c670a0db2b
Operating systems: Windows 10
Extension: MUI

Translations messages and strings

If an error occurred or the following message in Chinese (Simplified) language and you cannot find a solution, than check answer in English. Table below helps to know how correctly this phrase sounds in English.

id Chinese (Simplified) English
999捕获实时诊断信息。
Captures real-time diagnostic information.
1000显示 WFP 配置和状态。
Shows WFP configuration and state.
1001设置 WFP 诊断选项。
Sets WFP diagnostic options.
1002控制 WFP-IPsec 事件跟踪会话。
Controlling the WFP-IPsec event trace session.
1990启动交互式捕获会话。
Starts an interactive capture session.
1991


用法: capture start
[ [ cab = ] (ON | OFF) ]
[ [ traceonly = ] (ON | OFF) ]
[ [ keywords = ] (NONE | BCAST | MCAST | BCAST+MCAST) ]
[ [ file = ] ]


参数:

标记 值
cab - 可以是 ON 或 OFF。默认值为 ON。
ON 将文件编译为单一 .cab 文件。
OFF 保持输出文件的未压缩状态。
如果进行你自己的故障排除,
而不是为其他人收集数据,则这很有用。


traceonly - 可以是 ON 或 OFF。默认值为 OFF。
ON 仅收集事件跟踪数据,这会减小输出文件大小。

keywords - 可以是 NONE、BCAST、MCAST 或 BCAST+MCAST。
默认值是 BCAST+MCAST。
设置用于会话的网络事件关键字。
BCAST 包含广播事件,MCAST 包含多播事件。若要减小用于长期
运行的捕获的文件大小,设置为 NONE。

file - 输出文件名。默认值为 "wfpdiag.cab"。
如果 cab 选项为 ON,则文件名不应
包括扩展名,因为 .cab 会自动添加到生成的文件。

备注: 启动交互式捕获会话。
若要停止捕获,请运行 "capture stop"。



Usage: capture start
[ [ cab = ] (ON | OFF) ]
[ [ traceonly = ] (ON | OFF) ]
[ [ keywords = ] (NONE | BCAST | MCAST | BCAST+MCAST) ]
[ [ file = ] ]

Parameters:

Tag Value
cab - Can be ON or OFF. The default is ON.
ON compiles the files in a single .cab file.
OFF leaves the output files uncompressed.
This is useful if doing your own troubleshooting,
rather than collecting data for others.

traceonly - Can be ON or OFF. The default is OFF.
ON collects only event tracing data,
which reduces the output file size.

keywords - Can be NONE, BCAST, MCAST, or BCAST+MCAST.
The default is BCAST+MCAST.
Sets the net event keywords used for the session.
BCAST includes broadcast events and MCAST includes
multicast events. To reduce the file size for long-
running captures, set to NONE.

file - Output file name. The default is 'wfpdiag.cab'.
If the cab option is ON, the file name should not
include the extension since the .cab is
automatically added to the output file.

Remarks: Starts an interactive capture session.
To stop capture, run 'capture stop'.
1992停止交互式捕获会话。
Stops an interactive capture session.
1993


用法: capture stop


备注: 停止交互式捕获会话。
执行的上一命令是 "capture start" 时生效。



Usage: capture stop


Remarks: Stops an interactive capture session.
Takes effect if previous command executed was 'capture start'.
2000显示 WFP 和 IPSec 的当前状态。
Displays the current state of WFP and IPsec.
2001


用法: show state [ [ file = ] | - ]

参数:

标记 值
file - 输出文件名。默认值为 "wfpstate.xml"。
如果将此参数设置为短划线,"file = -",则输出将仅写入
控制台。

备注: 显示 WFP 和 IPSec 的当前状态。



Usage: show state [ [ file = ] | - ]

Parameters:

Tag Value
file - Output file name. The default is 'wfpstate.xml'.
If this parameter is set to the dash character,
'file = -', the output is written only to the console.

Remarks: Displays the current state of WFP and IPsec.
2002显示匹配指定流量参数的筛选器。
Displays filters matching the specified traffic parameters.
2003


用法: show filters
[ [ file = ] | - ]
[ [ protocol = ] ]
[ [ localaddr = ] ]
[ [ remoteaddr = ] ]
[ [ localport = ] ]
[ [ remoteport = ] ]
[ [ appid = ] ]
[ [ userid = ] ]
[ [ dir = ] IN | OUT ]
[ [ verbose = ] ON | OFF ]

参数:

标记 值
file - 输出文件名。默认值为 "filters.xml"。
如果将此参数设置为短划线,"file = -",则仅将输出写入
控制台。

protocol - IP 协议。它必须是整数。

localaddr - IP 地址。"localaddr" 为本地 IP 地址,
remoteaddr "remoteaddr" 是远程 IP 地址。
地址可以是 IPv4 或 IPv6。
如果同时指定本地地址和远程地址,则它们必须都属于相同
地址族。

localport - 端口。"localport" 为本地端口,
remoteport "remoteport" 为远程端口。它们必须为整数。

appid - 应用程序正在发送或接收本地主机上的流量。
这可以是 NT 路径,例如
\device\harddiskvolume1\windows\system32\ftp.exe
或 DOS 路径,例如
c:\Windows\System32\ftp.exe
指定的路径必须存在。

userid - 用户正在发送或接收本地主机上的流量。
userid 可以是 SID (如 "S-1-5-18")或
用户名(如 "nt authority\system")。


dir - 连接的方向。默认情况下,同时显示用于入站和出站通讯的
筛选器。

使用 IN 仅显示用于出站通讯的筛选器,或使用 OUT 仅显示用于
出站通讯的筛选器。

verbose - 确定是否显示所有筛选器。可以是 ON 或 OFF。
默认情况下是 OFF,该命令试图取消不可能影响连接的匹配的
筛选器。


备注: 显示匹配指定流量参数的筛选器。



Usage: show filters
[ [ file = ] | - ]
[ [ protocol = ] ]
[ [ localaddr = ] ]
[ [ remoteaddr = ] ]
[ [ localport = ] ]
[ [ remoteport = ] ]
[ [ appid = ] ]
[ [ userid = ] ]
[ [ dir = ] IN | OUT ]
[ [ verbose = ] ON | OFF ]

Parameters:

Tag Value
file - Output file name. The default is 'filters.xml'.
If this parameter is set to the dash character,
'file = -', the output is written only to the console.

protocol - The IP protocol. This must be an integer.

localaddr - The IP addresses. 'localaddr' is the local IP address,
remoteaddr and the 'remoteaddr' is the remote IP address.
The addresses are either IPv4 or IPv6.
If both local and remote addressses are specified,
they both must belong to the same address family.

localport - The ports. 'localport' is the local port
remoteport and 'remoteport' is the remote port.
They must be integers.

appid - The application sending or receiving the traffic
on the local host.
This either an NT path such as
'\device\harddiskvolume1\windows\system32\ftp.exe'
or a DOS path such as
'c:\Windows\System32\ftp.exe'
The supplied path must exist.

userid - The user sending or receiving the traffic
on the local host. The userid may be a SID
(such as 'S-1-5-18') or a user name (such as
'nt authority\system').

dir - The direction of the connection. By default, filters
for both inbound and outbound traffic are displayed.

Use IN to display only filters for inbound traffic
or OUT to display only filters for outbound traffic.

verbose - Determines whether to display all filters.
Can be ON or OFF. The default is OFF, which attempts
to suppress matching filters that are unlikely to
affect connectivity.
ON does not suppress any filters.


Remarks: Displays filters matching the specified traffic parameters.
2004显示启动时策略和筛选器。
Displays the boot-time policy and filters.
2005


用法: show boottimepolicy [ [ file = ] | - ]

参数:

标记 值
file - 输出文件名。默认值为 "btpol.xml"。
如果将此参数设置为短划线,"file = -",则
输出将仅写入控制台。

备注: 显示启动时策略和筛选器。



Usage: show boottimepolicy [ [ file = ] | - ]

Parameters:

Tag Value
file - Output file name. The default is 'btpol.xml'.
If this parameter is set to the dash character,
'file = -', the output is written only to the console.

Remarks: Displays the boot-time policy and filters.
2008显示全局 WFP 选项。
Displays the global WFP options.
2009


用法: show options [optionsfor = ] NETEVENTS | KEYWORDS | TXNWATCHDOG

参数:

标记 值
optionsfor - 可以为 NETEVENTS、KEYWORDS 或 TXNWATCHDOG。
NETEVENTS 显示是否缓冲网络事件
以用于诊断。
KEYWORDS 显示缓冲哪些网络事件
以用于诊断。
TXNWATCHDOG 显示事务监视器事件
超时(毫秒)。

备注: 显示为指定选项设置的当前值。



Usage: show options [optionsfor = ] NETEVENTS | KEYWORDS | TXNWATCHDOG

Parameters:

Tag Value
optionsfor - Can be either NETEVENTS, KEYWORDS, or TXNWATCHDOG.
NETEVENTS shows whether network events are
buffered for diagnostics.
KEYWORDS shows which network events are
buffered for diagnostics.
TXNWATCHDOG shows the timeout in milliseconds for the
transaction watchdog event.

Remarks: Displays the current value set for the specified option.
2010显示指定文件的应用程序 ID。
Displays the application ID for the specified file.
2011


用法: show appid [ file = ]

参数:

标记 值
file - 指定应用程序的 DOS 路径。

备注: 显示指定文件的应用程序 NT 路径。
提供的路径必须存在。



Usage: show appid [ file = ]

Parameters:

Tag Value
file - Specifies the DOS path for the application.

Remarks: Displays the application NT path for the specified file.
The supplied path must exist.
2014设置全局 WFP 选项。
Sets the global WFP options.
2015


用法: set options
[ netevents = ON | OFF ]
[ [ keywords = ] NONE | BCAST | MCAST| BCAST+MCAST ]
[ [ txnwatchdog = ] ]

参数:

标记 值
netevents - 可以为 ON 或 OFF。
设置 netevents 选项。

keywords - 可以为 NONE、BCAST、MCAST 或 BCAST+MCAST。
设置 keywords 选项。默认值为 NONE。


txnwatchdog - 设置事务监视器事件
超时(毫秒)。这必须是一个整数。
如果未指定值,
则将超时设置为零,并为每个事务触发一个事件。

备注: 设置全局 WFP 选项。
每次执行时,只能设置一个选项参数。



Usage: set options
[ netevents = ON | OFF ]
[ [ keywords = ] NONE | BCAST | MCAST| BCAST+MCAST ]
[ [ txnwatchdog = ] ]

Parameters:

Tag Value
netevents - Can be either ON or OFF.
Sets the netevents option.

keywords - Can be NONE, BCAST, MCAST, or BCAST+MCAST.
Sets the keywords option. The default is NONE.


txnwatchdog - Sets the timeout in milliseconds for the transaction
watchdog event. This must be an integer. If no value
is specified, the timeout is set to zero, and an
event will be triggered for every transaction.

Remarks: Sets the global WFP options.
Only one option parameter can be set per execution.
2018指示是否正在进行交互式捕获会话。
Tells whether an interactive capture session is in progress.
2019

用法: capture status


备注: 指示是否正在进行交互式捕获会话。



Usage: capture status


Remarks: Tells whether an interactive capture session is in progress.
2055显示最近匹配流量参数的网络事件。
Displays recent network events matching the traffic parameters.
2064


用法: show netevents
[ [ file = ] | - ]
[ [ protocol = ] ]
[ [ localaddr = ] ]
[ [ remoteaddr = ] ]
[ [ localport = ] ]
[ [ remoteport = ] ]
[ [ appid = ] ]
[ [ userid = ] ]
[ [ timewindow = ] ]

参数:

标记 值
file - 输出文件名。默认值为 "netevents.xml"。
如果将此参数设置为短划线,"file = -",则
输出将仅写入控制台。

protocol - IP 协议。它必须是整数。

localaddr - IP 地址。"localaddr" 为本地 IP 地址,

remoteaddr "remoteaddr" 为远程 IP 地址。
地址可以是 IPv4 或 IPv6。
如果同时指定本地地址和远程地址,则它们必须是相同的地址族。

localport - 端口。"localport" 为本地端口,"remoteport" 为远程端口。
remoteport 它们必须为整数。

appid - 应用程序正在发送或接收本地主机上的流量。
这可以是 NT 路径,例如
"\device\harddiskvolume1\windows\system32\ftp.exe"
或 DOS 路径,例如
"c:\Windows\System32\ftp.exe"
提供的路径必须存在。

userid - 用户正在发送或接收本地主机上的流量。
userid 可以是 SID (如 "S-1-5-18")或
用户名(如 "nt authority\system")。

timewindow - 将输出限制为在指定秒数内发生的网络事件。
该数量必须为整数。

备注: 显示最近匹配指定流量参数的网络事件。



Usage: show netevents
[ [ file = ] | - ]
[ [ protocol = ] ]
[ [ localaddr = ] ]
[ [ remoteaddr = ] ]
[ [ localport = ] ]
[ [ remoteport = ] ]
[ [ appid = ] ]
[ [ userid = ] ]
[ [ timewindow = ] ]

Parameters:

Tag Value
file - Output file name. The default is 'netevents.xml'.
If this parameter is set to the dash character,
'file = -', the output is written only to the console.

protocol - The IP protocol. This must be an integer.

localaddr - The IP addresses. 'localaddr' is the local IP address,
remoteaddr and 'remoteaddr' is the remote IP address.
The addresses are either IPv4 or IPv6.
If both local and remote addresses are specified,
they both must belong to the same address family.

localport - The ports. 'localport' is the local port,
and 'remoteport' is the remote port.
remoteport They must be integers.

appid - The application sending or receiving the traffic
on the local host.
This either an NT path such as
'\device\harddiskvolume1\windows\system32\ftp.exe'
or a DOS path such as
'c:\Windows\System32\ftp.exe'
The supplied path must exist.

userid - The user sending or receiving the traffic
on the local host. The userid may be a SID
(such as 'S-1-5-18') or
a user name (such as 'nt authority\system').

timewindow - Limits the output to network events that occurred
within a specified number of seconds.
This must be an integer.

Remarks: Displays recent network events matching the specified traffic parameters.
2065显示指定的安全描述符。
Displays the specified security descriptor.
2066


用法: show security
[ type = ] CALLOUT|ENGINE|FILTER|IKESADB|IPSECSADB|LAYER|NETEVENTS
|PROVIDER|PROVIDERCONTEXT|SUBLAYER
[ [ guid = ]

参数:

标记 值
type - 指定要检索的对象类型。
可以是 CALLOUT、ENGINE、FILTER、IKESADB、IPSECSADB、
LAYER、NETEVENTS、PROVIDER、PROVIDERCONTEXT
或 SUBLAYER。

guid - 对于支持每对象的安全描述符的对象类型,这是该对象的
GUID。如果未指定,则会默认为 IID_NULL,这将导致检索类
型容器的安全描述符。
下列类型支持每对象的安全描述符:
callout
filter
layer
provider
providercontext
sublayer

备注: 显示指定安全描述符。



Usage: show security
[ type = ] CALLOUT|ENGINE|FILTER|IKESADB|IPSECSADB|LAYER|NETEVENTS
|PROVIDER|PROVIDERCONTEXT|SUBLAYER
[ [ guid = ]

Parameters:

Tag Value
type - Specifies the object type to be retrieved.
Can be CALLOUT, ENGINE, FILTER, IKESADB, IPSECSADB,
LAYER, NETEVENTS, PROVIDER, PROVIDERCONTEXT,
or SUBLAYER.

guid - For object types that support per-object security
descriptors, this is the GUID of the object. If not
specified, it defaults to IID_NULL, which retrieves
the security descriptor of the type container.
The following types support per-object security descriptors:
callout
filter
layer
provider
providercontext
sublayer

Remarks: Displays the specified security descriptor.
2075显示 TCP/IP 堆栈和 RPC 子系统使用的系统端口。
Displays system ports used by the TCP/IP Stack and the RPC sub-system.
2084


用法: show sysports [ [ file = ] | - ]
参数:

标记 值
file - 输出文件名称。默认值为 "sysports.xml"。
如果将该参数设置为短划线,"file = -",
则仅将输出写入到控制台中。

备注: 显示 TCP/IP 堆栈和 RPC 子系统使用的系统端口。



Usage: show sysports [ [ file = ] | - ]
Parameters:

Tag Value
file - Output file name. The default is 'sysports.xml'.
If this parameter is set to the dash character,
'file = -', the output is written only to the console.

Remarks: Displays system ports used by the TCP/IP stack and the
RPC sub-system.
3000正在初始化数据集 -- 请稍候。
Initializing data collection -- please wait.
3001只收集事件跟踪。
Only event tracing will be collected.
3002初始化完成。重现方案,然后运行 "capture stop"。
Initialization complete. Reproduce the scenario, then run 'capture stop'.
3003数据收集成功;输出 = %1!s!
Data collection successful; output = %1!s!
3004数据收集成功;输出 =
%t%1
%t%2
Data collection successful; output =
%t%1
%t%2
3005正在完成数据收集 -- 请稍候。
Finalizing data collection -- please wait.
3006成功。
Success.
3007ETW 会话期间,至少有一个网络事件未捕获。
At least one netevent was not captured during the ETW session.
4001无法连接 BFE;错误 = %1!s!
Unable to connect to BFE; error = %1!s!
4002无法启动 ETW 跟踪会话;错误=%1!s!
Unable to start an ETW trace session; error=%1!s!
4003无法使用写访问权限打开 XML 文件;错误=%1!s!
Unable to open the XML file with Write access; error=%1!s!
4004无法订阅更改通知;错误 = %1!s!
Unable to subscribe to change notifications; error = %1!s!
4005无法将输出写入 XML 文件;错误 = %1!s!
Unable to write output to the XML file; error = %1!s!
4006无法收集运行时事件;错误 = %1!s!
Unable to collect run-time events; error = %1!s!
4007无法设置跟踪文件的格式;错误 = %1!s!
Unable to format the trace file; error = %1!s!
4008无法创建 CAB 文件。
Unable to create the cabinet file.
4009无法加载 XML 文档;错误 = %1!s!
Unable to load the XML document; error = %1!s!
4010导入文件解析在行 %1!u!,列 %2!u! 处终止
Import file parsing terminated at line %1!u!, column %2!u!
4011在行 %2!u!,列 %3!u! 发现意外元素“%1”
Unexpected element '%1' at line %2!u!, column %3!u!
4012在行 %2!u!,列 %3!u! 处的元素“%1”中出现意外文本。
Unexpected text in element '%1' at line %2!u!, column %3!u!.
4013在行 %2!u!,列 %3!u! 处的元素“%1”中出现无效文本。
Invalid text in element '%1' at line %2!u!, column %3!u!.
4014无法读取启动时策略;错误 = %1!s!
Unable to read the boot-time policy; error = %1!s!
4015无法枚举网络事件;错误 = %1!s!
Unable to enumerate the network events; error = %1!s!
4016无法打开数据收集器集;错误 = %1!s!
Unable to open the data collector set; error = %1!s!
4017无法添加对象;错误 = %1!s!
Unable to add an object; error = %1!s!
4018无法删除对象;错误 = %1!s!
Unable to delete an object; error = %1!s!
4019该对象在行 %1!u!,列 %2!u! 处定义
The object is defined at line %1!u!, column %2!u!
4020捕获已经在进行中。
Capture is already in progress.
4021没有正在进行的捕获。
No capture is in progress.
4022IKEEXT 日志文件不存在。请确保启用了 IKEEXT 跟踪。
The IKEEXT log file does not exist. Ensure that IKEEXT tracing is enabled.
4028无法查询 ETW 丢失的网络事件。
Unable to query lost netevents from ETW.
5000删除所有 IPsec DoS 保护配置。
Deletes all IPsec DoS Protection configuration.
5001
reset

删除所有 IPsec DoS 保护配置。

参数: 无


reset

Deletes all IPsec DoS Protection configuration.

Parameters: none

5100添加 IPsec DoS 保护配置。
Adds IPsec DoS Protection configuration.
5101添加 IPsec DoS 保护接口配置。
Adds IPsec DoS Protection interface configuration.
5102
add interface
[name=]
[type=]public|internal

添加 IPsec DoS 保护接口配置。

参数:

标记 值
name - 接口的友好名称。

type - 接口类型。
public: 面向公用网络的接口。
internal: 面向内部网络的接口。

示例:

add interface "Local Area Connection" public
add interface name="Local Area Connection" type=public


add interface
[name=]
[type=]public|internal

Adds IPsec DoS Protection interface configuration.

Parameters:

Tag Value
name - Friendly name of the interface.

type - Interface type.
public: Interface faces public network.
internal: Interface faces internal network.

Examples:

add interface "Local Area Connection" public
add interface name="Local Area Connection" type=public

5110添加 IPsec DoS 保护键控模块配置。
Adds IPsec DoS Protection keying module configuration.
5111
add allowedkeyingmodule
[name=]ikev1|ikev2|authip
[[internalprefix=][/]]

添加 IPsec DoS 保护允许的键控模块配置。

参数:

标记 值
name - 允许的 IPsec 键控模块的名称。
ikev1: IKEv1 键控模块。
ikev2: IKEv2 键控模块。
authip: AuthIP 键控模块。

internalprefix - 需要允许键控模块的内部
主机 IPv6 地址或子网(可选)。如果未指定,则
所有内部 IPv6 地址都将允许键控模块。

备注: 默认情况下,允许的键控模块的列表中存在 AuthIP。

示例:

add allowedkeyingmodule ikev1
add allowedkeyingmodule name=ikev1
add allowedkeyingmodule ikev1 3ffe:401d:1f00:baa::1


add allowedkeyingmodule
[name=]ikev1|ikev2|authip
[[internalprefix=][/]]

Adds IPsec DoS Protection allowed keying module configuration.

Parameters:

Tag Value
name - Name of an IPsec keying module to allow.
ikev1: The IKEv1 keying module.
ikev2: The IKEv2 keying module.
authip: The AuthIP keying module.

internalprefix - Internal host IPv6 address or subnet for which the keying
module needs to be allowed (optional). If not specified, it
will be allowed for all internal IPv6 addresses.

Remarks: AuthIP is present in the list of allowed keying modules by default.

Examples:

add allowedkeyingmodule ikev1
add allowedkeyingmodule name=ikev1
add allowedkeyingmodule ikev1 3ffe:401d:1f00:baa::1

5120添加 IPsec DoS 保护 IPv6 筛选器配置。
Adds IPsec DoS Protection IPv6 filter configuration.
5121
add filter
[[publicprefix=][/]]
[[internalprefix=][/]]
[action=]exempt|block

添加 IPsec DoS 保护 IPv6 筛选器配置。

参数:

标记 值
publicprefix - 公共主机 IPv6 地址或子网(可选)。如果未指定,
筛选器将与所有公共 IPv6 地址匹配。

internalprefix - 内部主机 IPv6 地址或子网(可选)。如果未指定,
筛选器将与所有内部 IPv6 地址匹配。

action - 对所有与筛选器匹配的流量采取的措施。
exempt: 不需要匹配的流量经过 IPsec 保护。
block: 阻止匹配的流量。

示例:

add filter publicprefix=3ffe:401d:1f00::/64 action=block


add filter
[[publicprefix=][/]]
[[internalprefix=][/]]
[action=]exempt|block

Adds IPsec DoS Protection IPv6 filter configuration.

Parameters:

Tag Value
publicprefix - Public host IPv6 address or subnet (optional). If not specified,
the filter will match all public IPv6 addresses.

internalprefix - Internal host IPv6 address or subnet (optional). If not specified,
the filter will match all internal IPv6 addresses.

action - Action to take for any traffic that matches the filter.
exempt: Don't require matching traffic to be IPsec protected.
block: Block matching traffic.

Examples:

add filter publicprefix=3ffe:401d:1f00::/64 action=block

5200删除 IPsec DoS 保护配置。
Deletes IPsec DoS Protection configuration.
5201删除 IPsec DoS 保护接口配置。
Deletes IPsec DoS Protection interface configuration.
5202
delete interface [name=]

删除 IPsec DoS 保护接口配置。

参数:

标记 值
name - 接口的友好名称。

示例:

delete interface "Local Area Connection"
delete interface name="Local Area Connection"


delete interface [name=]

Deletes IPsec DoS Protection interface configuration.

Parameters:

Tag Value
name - Friendly name of the interface.

Examples:

delete interface "Local Area Connection"
delete interface name="Local Area Connection"

5210删除 IPsec DoS 保护允许的键控模块配置。
Deletes IPsec DoS Protection allowed keying module configuration.
5211
delete allowedkeyingmodule
[name=]ikev1|ikev2|authip
[[internalprefix=][/]]

删除 IPsec DoS 保护允许的键控模块配置。

参数:

标记 值
name - 禁止的 IPsec 键控模块的名称。
ikev1: IKEv1 键控模块。
ikev2: IKEv2 键控模块。
authip: AuthIP 键控模块。

internalprefix - 应禁止键控模块的内部
主机 IPv6 地址或子网(可选)。如果未指定,则
所有内部 IPv6 地址都将禁止键控模块。

示例:

delete allowedkeyingmodule ikev1
delete allowedkeyingmodule name=ikev1
delete allowedkeyingmodule ikev1 3ffe:401d:1f00:baa::1


delete allowedkeyingmodule
[name=]ikev1|ikev2|authip
[[internalprefix=][/]]

Deletes IPsec DoS Protection allowed keying module configuration.

Parameters:

Tag Value
name - Name of an IPsec keying module to disallow.
ikev1: The IKEv1 keying module.
ikev2: The IKEv2 keying module.
authip: The AuthIP keying module.

internalprefix - Internal host IPv6 address or subnet for which the keying
module should be disallowed (optional). If not specified, it
will be disallowed for all internal IPv6 addresses.

Examples:

delete allowedkeyingmodule ikev1
delete allowedkeyingmodule name=ikev1
delete allowedkeyingmodule ikev1 3ffe:401d:1f00:baa::1

5220删除 IPsec DoS 保护 IPv6 筛选器配置。
Deletes IPsec DoS Protection IPv6 filter configuration.
5221
delete filter
[[publicprefix=][/]]
[[internalprefix=][/]]

删除 IPsec DoS 保护 IPv6 筛选器配置。

参数:

标记 值
publicprefix - 公共主机 IPv6 地址或子网(可选)。这必须与
使用相应的
添加命令指定的 publicprefix 相同。

internalprefix - 内部主机 IPv6 地址或子网(可选)。这必须与
使用相应的
添加命令指定的 internalprefix 相同。

示例:

delete filter 3ffe:401d:1f00::/64
delete filter publicprefix=3ffe:401d:1f00::/64


delete filter
[[publicprefix=][/]]
[[internalprefix=][/]]

Deletes IPsec DoS Protection IPv6 filter configuration.

Parameters:

Tag Value
publicprefix - Public host IPv6 address or subnet (optional). This must be
same as the publicprefix specified with the corresponding
add command.

internalprefix - Internal host IPv6 address or subnet (optional). This must be
same as the internalprefix specified with the corresponding
add command.

Examples:

delete filter 3ffe:401d:1f00::/64
delete filter publicprefix=3ffe:401d:1f00::/64

5300设置 IPsec DoS 保护信息。
Sets IPsec DoS Protection information.
5301设置 IPsec DoS 保护 DSCP 标记配置。
Sets IPsec DoS Protection DSCP marking configuration.
5302
set dscp
[type=]ipsecauthenticated|ipsecunauthenticated|icmpv6|filtered|default
[value=]|disable

设置 IPsec DoS 保护 DSCP 标记配置。

参数:

标记 值
type - 为其指定 DSCP 标记的入站流量的类型。
ipsecauthenticated: 已通过身份验证的 IPv6 IPsec 流量。
ipsecunauthenticated: 未通过身份验证的 IPv6 IPsec 流量。
icmpv6: ICMPv6 流量。
filtered: 筛选免除的 IPv6 流量。
default: 默认阻止免除的流量。

value - 要在流量类的前 6 位或相应流量的 IP 标头的 TOS
字段中标记的 DCSP 值。
: 必须小于等于 63。
disable: 禁用此标记。

备注: 默认情况下,禁用所有流量类型的 DSCP 标记。

示例:

set dscp ipsecunauthenticated 10
set dscp type=ipsecunauthenticated value=10
set dscp ipsecauthenticated DISABLE


set dscp
[type=]ipsecauthenticated|ipsecunauthenticated|icmpv6|filtered|default
[value=]|disable

Sets IPsec DoS Protection DSCP marking configuration.

Parameters:

Tag Value
type - Type of inbound traffic for which the DSCP marking is being specified.
ipsecauthenticated: Authenticated IPv6 IPsec traffic.
ipsecunauthenticated: Unauthenticated IPv6 IPsec traffic.
icmpv6: ICMPv6 traffic.
filtered: Filter exempted IPv6 traffic.
default: Default-block exempted traffic.

value - DCSP value to mark in the top 6 bits of the traffic class or TOS
field in the IP header of corresponding traffic.
: Must be
5310设置 IPsec DoS 保护杂项配置。
Sets IPsec DoS Protection miscellaneous configuration.
5311
设置杂项
[[stateidletimeout=]]
[[peripratelimitidletimeout=]]
[[maxentries=]]
[[maxperipratelimitqueues=]]
[[defaultblock=]enable|disable]

设置 IPsec DoS 保护杂项配置。

参数:

标记 值
stateidletimeout - 状态非活动超时(秒)(可选)。
: 必须大于 0 且小于等于 4294967295。
默认值为 360。

peripratelimitidletimeout - 每个内部 IP 地址速率限制队列非活动超时(秒)(可选)。
: 必须大于 0 且小于等于 4294967295。
默认值为 360。

maxentries - 状态条目的最大数量(可选)。
: 必须大于 0 且小于等于 4294967295。
默认值为 75000。

maxperipratelimitqueues - 每个内部 IP 地址速率限制队列的最大数量(可选)。
: 必须大于 0 且小于等于 4294967295。
默认值为 50000。

defaultblock - 默认块设置的值(可选)。
enable: IPsec DoS 保护将丢弃在公用接口和内部接口之间转发的
所有 IPv4 流量和所有非 IPsec IPv6 流量(ICMPv6 除外)(默认设置)。
disable: IPsec DoS 保护将允许在公用接口和内部接口之间转发的
所有 IPv4 流量和所有非 IPsec IPv6 流量。

示例:

set miscellaneous 480 100000
set miscellaneous stateidletimeout=480 maxentries=100000
set miscellaneous defaultblock=disable


set miscellaneous
[[stateidletimeout=]]
[[peripratelimitidletimeout=]]
[[maxentries=]]
[[maxperipratelimitqueues=]]
[[defaultblock=]enable|disable]

Sets IPsec DoS Protection miscellaneous configuration.

Parameters:

Tag Value
stateidletimeout - State inactivity timeout in seconds (optional).
: Must be 0 and : Must be 0 and : Must be 0 and : Must be 0 and
5320设置 IPsec DoS 保护速率极限配置。
Sets IPsec DoS Protection rate limit configuration.
5321
set ratelimit
[type=]ipsecauthenticated|ipsecunauthenticated|ipsecunauthenticatedperip|
icmpv6|filtered|default
[value=]|disable

设置 IPsec DoS 保护速率极限配置。

参数:

标记 值
type - 为其指定速率极限的入站流量的类型。
ipsecauthenticated: 已通过身份验证的 IPv6 IPsec 流量。
默认情况下禁用速率极限。
ipsecunauthenticated: 未通过身份验证的 IPv6 IPsec 流量。
默认的速率极限为 102400 字节/秒。
ipsecunauthenticatedperip: 未通过身份验证的 IPv6 IPsec 流量的
每内部 IP 地址速率极限。
默认的速率极限为 10240 字节/秒。
icmpv6: ICMPv6 流量。
此流量类型的默认速率极限为
10240 字节/秒。
filtered: 筛选免除的 IPv6 流量。
默认的速率极限为 102400 字节/秒。
default: 默认禁止免除的流量。
默认的速率极限为 102400 字节/秒。

value - 速率极限的值(以字节/秒为单位)。
: 必须大于 0 且小于等于 4294967295。
disable: 禁用此速率极限。

示例:

set ratelimit ipsecunauthenticated 2048
set ratelimit type=ipsecunauthenticated value=2048
set ratelimit filtered disable


set ratelimit
[type=]ipsecauthenticated|ipsecunauthenticated|ipsecunauthenticatedperip|
icmpv6|filtered|default
[value=]|disable

Sets IPsec DoS Protection rate limit configuration.

Parameters:

Tag Value
type - Type of inbound traffic for which the rate limit is being specified.
ipsecauthenticated: Authenticated IPv6 IPsec traffic.
Rate limit disabled by default.
ipsecunauthenticated: Unauthenticated IPv6 IPsec traffic.
Default rate limit is 102400 bytes/sec.
ipsecunauthenticatedperip: Per internal IP address rate limit for
unauthenticated IPv6 IPsec traffic.
Default rate limit is 10240 bytes/sec.
icmpv6: ICMPv6 traffic. Default rate limit for
this traffic type is 10240 bytes/sec.
filtered: Filter exempted IPv6 traffic.
Default rate limit is 102400 bytes/sec.
default: Default-block exempted traffic.
Default rate limit is 102400 bytes/sec.

value - Value of the rate limit in bytes/sec.
: Must be 0 and
5400显示 IPsec DoS 保护信息。
Displays IPsec DoS Protection information.
5401显示 IPsec DoS 保护接口配置。
Displays IPsec DoS Protection interface configuration.
5402
show interface
[[type=]public|internal]

显示 IPsec DoS 保护接口配置。

参数:

标记 值
type - 接口类型(可选)。
public: 显示面向公用网络的接口。
internal: 显示面向内部网络的接口。

示例:

show interface
show interface public
show interface type=public


show interface
[[type=]public|internal]

Displays IPsec DoS Protection interface configuration.

Parameters:

Tag Value
type - Interface type (optional).
public: Show interfaces facing public network.
internal: Show interfaces facing internal network.

Examples:

show interface
show interface public
show interface type=public

5403公用接口: Public interfaces:
5404内部接口: Internal interfaces:
5410显示 IPsec DoS 保护键控模块配置。
Displays IPsec DoS Protection keying module configuration.
5411
show allowedkeyingmodule

显示 IPsec DoS 保护允许的键控模块配置。

参数: 无


show allowedkeyingmodule

Displays IPsec DoS Protection allowed keying module configuration.

Parameters: none

5412允许的键控模块(internalprefix - 键控模块列表):
Allowed keying modules (internalprefix - keying module list):
5420显示 IPsec DoS 保护 DSCP 标记配置。
Displays IPsec DoS Protection DSCP marking configuration.
5421
show dscp
[[type=]ipsecauthenticated|ipsecunauthenticated|icmpv6|filtered|default]

显示 IPsec DoS 保护 DSCP 标记配置。

参数:

标记 值
type - 应为其显示 DSCP 标记的入站流量的类型
(可选)。如果未指定,则将显示所有类型。
ipsecauthenticated: 已通过身份验证的 IPv6 IPsec 流量。
ipsecunauthenticated: 未通过身份验证的 IPv6 IPsec 流量。
icmpv6: ICMPv6 流量。
filtered: 筛选免除的 IPv6 流量。
default: 默认阻止免除的流量。

示例:

show dscp
show dscp ipsecunauthenticated
show dscp type=ipsecunauthenticated


show dscp
[[type=]ipsecauthenticated|ipsecunauthenticated|icmpv6|filtered|default]

Displays IPsec DoS Protection DSCP marking configuration.

Parameters:

Tag Value
type - Type of inbound traffic for which the DSCP marking should be displayed
(optional). If not specified, all types will be displayed.
ipsecauthenticated: Authenticated IPv6 IPsec traffic.
ipsecunauthenticated: Unauthenticated IPv6 IPsec traffic.
icmpv6: ICMPv6 traffic.
filtered: Filter exempted IPv6 traffic.
default: Default-block exempted traffic.

Examples:

show dscp
show dscp ipsecunauthenticated
show dscp type=ipsecunauthenticated

5422已通过身份验证的 IPv6 IPsec dscp: %1!s!
Authenticated IPv6 IPsec dscp: %1!s!
5423未经身份验证的 IPv6 IPsec dscp: %1!s!
Unauthenticated IPv6 IPsec dscp: %1!s!
5424ICMPv6 dscp: %1!s!
ICMPv6 dscp: %1!s!
5425IPv6 筛选免除的 dscp: %1!s!
IPv6 filter exempted dscp: %1!s!
5426默认阻止免除的 dscp: %1!s!
Default-block exempted dscp: %1!s!
5430显示 IPsec DoS 保护杂项配置。
Displays IPsec DoS Protection miscellaneous configuration.
5431
show miscellaneous

显示 IPsec DoS 保护杂项配置。

参数: 无


show miscellaneous

Displays IPsec DoS Protection miscellaneous configuration.

Parameters: none

5432状态空闲超时(秒): %1!u!
State idle timeout (seconds): %1!u!
5433每 IP 地址速率极限队列的空闲超时(秒): %1!u!
Per IP address rate limit queue idle timeout (seconds): %1!u!
5434最大状态条目数: %1!u!
Maximum number of state entries: %1!u!
5435每 IP 地址速率极限队列的最大数目: %1!u!
Maximum number of per IP address rate limit queues: %1!u!
5436默认阻止: %1!s!
Default block: %1!s!
5440显示 IPsec DoS 保护速率极限配置。
Displays IPsec DoS Protection rate limit configuration.
5441
show ratelimit
[[type=]ipsecauthenticated|ipsecunauthenticated|ipsecunauthenticatedperip|
icmpv6|filtered|default]

显示 IPsec DoS 保护速率极限配置。

参数:

标记 值
type - 应为其显示速率极限的流量的类型(可选)。
如果未指定,则将显示所有类型。
ipsecauthenticated: 已通过身份验证的 IPv6 IPsec 流量。
ipsecunauthenticated: 未通过身份验证的 IPv6 IPsec 流量。
ipsecunauthenticatedperip: 未通过身份验证的 IPv6 IPsec 流量的
每内部 IP 地址速率极限。
icmpv6: ICMPv6 流量。
filtered: 筛选免除的 IPv6 流量。
default: 默认阻止免除的流量。

示例:

show ratelimit
show ratelimit ipsecunauthenticated
show ratelimit type=ipsecunauthenticated


show ratelimit
[[type=]ipsecauthenticated|ipsecunauthenticated|ipsecunauthenticatedperip|
icmpv6|filtered|default]

Displays IPsec DoS Protection rate limit configuration.

Parameters:

Tag Value
type - Type of traffic for which the rate limit should be displayed (optional).
If not specified, all types will be displayed.
ipsecauthenticated: Authenticated IPv6 IPsec traffic.
ipsecunauthenticated: Unauthenticated IPv6 IPsec traffic.
ipsecunauthenticatedperip: Per internal IP address rate limit for
unauthenticated IPv6 IPsec traffic.
icmpv6: ICMPv6 traffic.
filtered: Filter exempted IPv6 traffic.
default: Default-block exempted traffic.

Examples:

show ratelimit
show ratelimit ipsecunauthenticated
show ratelimit type=ipsecunauthenticated

5442已通过身份验证的 IPv6 IPsec 速率极限(字节/秒): %1!s!
Authenticated IPv6 IPsec rate limit (bytes/sec): %1!s!
5443未通过身份验证的 IPv6 IPsec 速率极限(字节/秒): %1!s!
Unauthenticated IPv6 IPsec rate limit (bytes/sec): %1!s!
5444未通过身份验证的 IPv6 IPsec 的每 IP 地址速率极限(字节/秒): %1!s!
Unauthenticated IPv6 IPsec per IP address rate limit (bytes/sec): %1!s!
5445ICMPv6 速率极限(字节/秒): %1!s!
ICMPv6 rate limit (bytes/sec): %1!s!
5446IPv6 筛选免除速率极限(字节/秒): %1!s!
IPv6 filter exempted rate limit (bytes/sec): %1!s!
5447默认阻止免除的速率极限(字节/秒): %1!s!
Default-block exempted rate limit (bytes/sec): %1!s!
5450显示 IPsec DoS 保护状态条目。
Displays IPsec DoS Protection state entries.
5451
show state
[[publicprefix=][/]]
[[internalprefix=][/]]

显示 IPsec DoS 保护内与指定条件匹配的所有状态条目。

参数:

标记 值
publicprefix - 公共主机 IPv6 地址或子网(可选)。如果未
指定,则将匹配所有公共 IPv6 地址。

internalprefix - 内部主机 IPv6 地址或子网(可选)。如果未
指定,则将匹配所有内部 IPv6 地址。

示例:
Show state
Show state publicprefix=3ffe::/16
Show state internalprefix=3ffe:401d:1f00:baa::1


show state
[[publicprefix=][/]]
[[internalprefix=][/]]

Displays all state entries inside IPsec DoS Protection that match specified criteria.

Parameters:

Tag Value
publicprefix - Public host IPv6 address or subnet (optional). If not
specified, all public IPv6 addresses will be matched.

internalprefix - Internal host IPv6 address or subnet (optional). If not
specified, all internal IPv6 addresses will be matched.

Examples:
Show state
Show state publicprefix=3ffe::/16
Show state internalprefix=3ffe:401d:1f00:baa::1

5452
IPsec DoS 保护状态条目(有 %1!u! 个条目)
----------------------------------------------------------------------------

IPsec DoS Protection state entries (There are %1!u! entries)
----------------------------------------------------------------------------
5453公共主机 IPv6 地址: %1!s!
Public host IPv6 address: %1!s!
5454内部主机 IPv6 地址: %1!s!
Internal host IPv6 address: %1!s!
5455此状态允许的入站 IPv6 IPsec 数据包总数: %1!I64u!
Total inbound IPv6 IPsec packets allowed on this state: %1!I64u!
5456此状态允许的出站 IPv6 IPsec 数据包总数: %1!I64u!
Total outbound IPv6 IPsec packets allowed on this state: %1!I64u!
5457状态创建后经历的时间(秒): %1!u!
Time elapsed since state creation (seconds): %1!u!
5460显示 IPsec DoS 保护统计信息。
Displays IPsec DoS Protection statistics.
5461
show statistics

显示 IPsec DoS 保护统计信息。

参数: 无


show statistics

Displays IPsec DoS Protection statistics.

Parameters: none

5462已创建的状态条目总数: %1!I64u!
Total state entries created: %1!I64u!
5463当前状态条目: %1!I64u!
Current state entries: %1!I64u!
5464当前每 IP 地址速率极限队列: %1!I64u!
Current per IP address rate limit queues: %1!I64u!
5465入站允许的未通过身份验证的 IPv6 IPsec 数据包总数: %1!I64u!
Total inbound allowed unauthenticated IPv6 IPsec packets: %1!I64u!
5466由于速率极限已放弃的未通过入站身份验证的 IPv6 IPsec 数据包总数: %1!I64u!
Total inbound unauthenticated IPv6 IPsec packets discarded due to rate limit: %1!I64u!
5467由于每 IP 地址速率极限已放弃的未通过入站身份验证的 IPv6 IPsec 数据包总数: %1!I64u!
Total inbound unauthenticated IPv6 IPsec packets discarded due to per IP address rate limit: %1!I64u!
5468由于其他原因已放弃的未通过入站身份验证的 IPv6 IPsec 数据包总数: %1!I64u!
Total inbound unauthenticated IPv6 IPsec packets discarded due to other reasons: %1!I64u!
5469入站允许的已通过身份验证的 IPv6 IPsec 数据包总数: %1!I64u!
Total inbound allowed authenticated IPv6 IPsec packets: %1!I64u!
5470由于速率极限已放弃的已通过入站身份验证的 IPv6 IPsec 数据包总数: %1!I64u!
Total inbound authenticated IPv6 IPsec packets discarded due to rate limit: %1!I64u!
5471由于其他原因已放弃的已通过入站身份验证的 IPv6 IPsec 数据包总数: %1!I64u!
Total inbound authenticated IPv6 IPsec packets discarded due to other reasons: %1!I64u!
5472入站允许的 ICMPv6 数据包总数: %1!I64u!
Total inbound allowed ICMPv6 packets: %1!I64u!
5473由于速率极限已放弃的入站 ICMPv6 数据包总数: %1!I64u!
Total inbound ICMPv6 packets discarded due to rate limit: %1!I64u!
5474入站允许的筛选免除的 IPv6 数据包总数: %1!I64u!
Total inbound allowed filter exempted IPv6 packets: %1!I64u!
5475由于速率极限已放弃的入站筛选免除的 IPv6 数据包总数: %1!I64u!
Total inbound filter exempted IPv6 packets discarded due to rate limit: %1!I64u!
5476入站筛选器阻止的 IPv6 数据包总数: %1!I64u!
Total inbound filter blocked IPv6 packets: %1!I64u!
5477入站允许的默认阻止免除的数据包总数: %1!I64u!
Total inbound allowed default-block exempted packets: %1!I64u!
5478由于速率极限已放弃的入站默认阻止免除的数据包总数: %1!I64u!
Total inbound default-block exempted packets discarded due to rate limit: %1!I64u!
5479入站默认阻止已放弃的数据包总数: %1!I64u!
Total inbound default-block discarded packets: %1!I64u!
5480显示 IPsec DoS 保护 IPv6 筛选器配置。
Displays IPsec DoS Protection IPv6 filter configuration.
5481
show filter

显示 IPsec DoS 保护 IPv6 筛选器配置。

参数: 无


show filter

Displays IPsec DoS Protection IPv6 filter configuration.

Parameters: none

5482IPv6 筛选器(publicprefix internalprefix - 操作): IPv6 filters (publicprefix internalprefix - action):
5490显示 IPsec DoS 保护配置、统计信息和状态条目。
Displays IPsec DoS Protection configuration, statistics and state entries.
5491
show all

显示 IPsec DoS 保护配置、统计信息和状态条目。

参数: 无


show all

Displays IPsec DoS Protection configuration, statistics and state entries.

Parameters: none

5492
IPsec DoS 保护配置参数
----------------------------------------------------------------------------

IPsec DoS Protection configuration parameters
----------------------------------------------------------------------------
5493
IPsec DoS 保护统计信息
----------------------------------------------------------------------------

IPsec DoS Protection statistics
----------------------------------------------------------------------------
5500

EXIF

File Name:nshwfp.dll.mui
Directory:%WINDIR%\WinSxS\amd64_microsoft-windows-n..-security.resources_31bf3856ad364e35_10.0.15063.0_zh-cn_bed00d8864841ac6\
File Size:41 kB
File Permissions:rw-rw-rw-
File Type:Win32 DLL
File Type Extension:dll
MIME Type:application/octet-stream
Machine Type:Intel 386 or later, and compatibles
Time Stamp:0000:00:00 00:00:00
PE Type:PE32
Linker Version:14.10
Code Size:0
Initialized Data Size:41472
Uninitialized Data Size:0
Entry Point:0x0000
OS Version:10.0
Image Version:10.0
Subsystem Version:6.0
Subsystem:Windows GUI
File Version Number:10.0.15063.0
Product Version Number:10.0.15063.0
File Flags Mask:0x003f
File Flags:(none)
File OS:Windows NT 32-bit
Object File Type:Dynamic link library
File Subtype:0
Language Code:Chinese (Simplified)
Character Set:Unicode
Company Name:Microsoft Corporation
File Description:Windows 筛选平台 Netsh 帮助程序
File Version:10.0.15063.0 (WinBuild.160101.0800)
Internal Name:nshwfp.dll
Legal Copyright:© Microsoft Corporation. All rights reserved.
Original File Name:nshwfp.dll.mui
Product Name:Microsoft® Windows® Operating System
Product Version:10.0.15063.0
Directory:%WINDIR%\WinSxS\wow64_microsoft-windows-n..-security.resources_31bf3856ad364e35_10.0.15063.0_zh-cn_c924b7da98e4dcc1\

What is nshwfp.dll.mui?

nshwfp.dll.mui is Multilingual User Interface resource file that contain Chinese (Simplified) language for file nshwfp.dll (Windows 筛选平台 Netsh 帮助程序).

File version info

File Description:Windows 筛选平台 Netsh 帮助程序
File Version:10.0.15063.0 (WinBuild.160101.0800)
Company Name:Microsoft Corporation
Internal Name:nshwfp.dll
Legal Copyright:© Microsoft Corporation. All rights reserved.
Original Filename:nshwfp.dll.mui
Product Name:Microsoft® Windows® Operating System
Product Version:10.0.15063.0
Translation:0x804, 1200