powershell command to see what IPsec encryption protocols the Windows VPN client is using

Question

I need a powershell command or someting to see what IPsec encryption protocols the Windows VPN client is using in a client to server configuration

In elevated Powershell I ran the following with no errors.

Set-VpnConnectionIPsecConfiguration -ConnectionName "VPN Name" -AuthenticationTransformConstants SHA256128 -CipherTransformConstants AES256 -DHGroup Group14 -EncryptionMethod AES256 -IntegrityCheckMethod SHA256 -PfsGroup PFS2048 –Force

To see what the new IPsec configurations actually was I ran

Get-VpnConnection -Name "YourVPNConnectionName" | Get-VpnConnectionIPsecConfiguration

The error reported was:

Get-VpnConnectionIPsecConfiguration: The term 'Get-VpnConnectionIPsecConfiguration' is not recognized as a name of a cmdlet, function, script file, or executable program.

Searching the internet for hours with no workable result

Answer 1

Get-VpnConnectionIPsecConfiguration is not a valid cmdlet on Windows; only Set-VpnConnectionIPsecConfiguration is provided for configuring IPsec parameters on a VPN connection.

To view or confirm the IPsec settings that were applied to a specific IKEv2/L2TP VPN connection, use Set-VpnConnectionIPsecConfiguration with the -RevertToDefault or explicit parameter values as a reference, but there is no supported PowerShell command in the provided documentation that reads back and displays the currently effective IPsec configuration from the Windows VPN client.

The documented usage is write-only, for example:

Set-VpnConnectionIPsecConfiguration -ConnectionName "YourVPNConnectionName" `
  -AuthenticationTransformConstants SHA256128 `
  -CipherTransformConstants AES128 `
  -DHGroup Group14 `
  -EncryptionMethod AES128 `
  -IntegrityCheckMethod SHA256 `
  -PfsGroup PFS2048 `
  -Force

or to revert to defaults:

Set-VpnConnectionIPsecConfiguration -ConnectionName "YourVPNConnectionName" -RevertToDefault -Force

But there is no companion Get-* cmdlet in the VpnClient module to query and display those IPsec parameters.

---

References:

• Set-VpnConnectionIPsecConfiguration
• How to configure cryptographic settings for IKEv2 VPN connections