Exporting and Importing IPSec Policies

There are 2 methods for exporting and importing IPSec Policies:

Method #1 – Using the GUI

Probably easier for most people.

Export

1. Open an MMC window (Start > Run > MMC).

2. Add the IP Security and Policy Management Snap-In.

1. In the Select which computer this policy will manage window select the local computer (or any other policy depending upon your needs). Click Close then click Ok.

1. Right-click IP Security Policies in the left pane of the MMC console. Select All Tasks and then Export Policies.

1. Browse to the location where you want to save the file, give it a name and select Save.

1. File is now ready for importing, either by the GUI or by using NETSH.

Important Security Warning: Exporting IPSec Policies to a file might reveal pass phrases used by various IPSec Policies if file is stolen or left on a public share. If you’re using Kerberos or Digital Certificates in your IPSec Policies then there is no security issue.

Import

1. In the same MMC as before, right-click IP Security Policies in the left pane of the MMC console. Select All Tasks and then Import Policies.

1. Browse to the location where you saved the file, give it a name and select Open.

1. IPSec Policy is now ready and you can easily assign it by right-clicking it and selecting Assign.

Method #2 – Using NETSH

Requires a bit of Command Prompt knowledge, but still quite useful for batch operations.

Export

Open a Command Prompt and type:

netsh ipsec static exportpolicy c:'temp'ipsec_policy.ipsec

Import

Open a Command Prompt and type:

netsh ipsec static importpolicy c:'temp'ipsec_policy.ipsec

http://www.petri.co.il/exporting_and_importing_ipsec_policies.htm