Usage: add rule name= endpoint1=any|localsubnet|dns|dhcp|wins|defaultgateway| | | | | endpoint2=any|localsubnet|dns|dhcp|wins|defaultgateway| ...

Usage: add rule name=
      endpoint1=any|localsubnet|dns|dhcp|wins|defaultgateway|
         ||||
      endpoint2=any|localsubnet|dns|dhcp|wins|defaultgateway|
         ||||
      action=requireinrequestout|requestinrequestout|
         requireinrequireout|requireinclearout|noauthentication
      [description=]
      [mode=transport|tunnel (default=transport)]
      [enable=yes|no (default=yes)]
      [profile=public|private|domain|any[,...] (default=any)]
      [type=dynamic|static (default=static)]
      [localtunnelendpoint=any||]
      [remotetunnelendpoint=any||]
      [port1=0-65535|[,...]|any (default=any)]
      [port2=0-65535|[,...]|any (default=any)]
      [protocol=0-255|tcp|udp|icmpv4|icmpv6|any (default=any)]
      [interfacetype=wiresless|lan|ras|any (default=any)]
      [auth1=computerkerb|computercert|computercertecdsap256|
         computercertecdsap384|computerpsk|computerntlm|anonymous[,...]]
      [auth1psk=]
      [auth1ca=" [certmapping:yes|no] [excludecaname:yes|no] 
         [catype:root|intermediate (default=root)] |..."]
      [auth1healthcert=yes|no (default=no)]
      [auth1ecdsap256ca=" [certmapping:yes|no]
         [excludecaname:yes|no]
         [catype:root|intermediate (default=root)] | ..."]
      [auth1ecdsap256healthcert=yes|no (default=no)]
      [auth1ecdsap384ca=" [certmapping:yes|no]
         [excludecaname:yes|no]
         [catype:root|intermediate (default=root)] | ..."]
      [auth1ecdsap384healthcert=yes|no (default=no)]
      [auth2=computercert|computercertecdsap256|computercertecdsap384|
         userkerb|usercert|usercertecdsap256|usercertecdsap384|userntlm|
         anonymous[,...]]
      [auth2ca=" [certmapping:yes|no]
         [catype:root|intermediate (default=root)] | ..."]
      [auth2ecdsap256ca=" [certmapping:yes|no]
         [catype:root|intermediate (default=root)] | ..."]
      [auth2ecdsap384ca=" [certmapping:yes|no]
         [catype:root|intermediate (default=root)] | ..."]
      [qmpfs=dhgroup1|dhgroup2|dhgroup14|ecdhp256|ecdhp384|mainmode|
         none (default=none)]
      [qmsecmethods=authnoencap:+[valuemin]+[valuekb]|
         ah:+esp:-+[valuemin]+[valuekb]
         |default]
      [exemptipsecprotectedconnections=yes|no (default=no)]
      [applyauthz=yes|no (default=no)]