@rem  For XP IPSec
@rem Dynamic IPSec script
@rem Optional Authentication mode IPSec

@rem Remove all dynamic IPSec rules
ipseccmd -u

@rem Allow all ICMP on your home network to this computer
ipseccmd -f (192.168.*.*:+0::ICMP)


@rem  Attempt encryption for all traffic from your computer and all systems on any home network (192.168.*.*)
@  REPLACE PresharedKeyString with a random string (no double quotes in it!) that is at least 64 characters long
@  To assure that you are using IPSec, you need to run this same script on all other Windows XP sp2 hosts on your network.

ipseccmd -f 192.168.*.*+0 -n ah[sha] -a preshare:"PresharedKeyString" -1f 192.168.*.*+0 -soft