The Netsh commands for wired local area network (LAN) provide methods to configure connectivity and security settings for computers running Windows Vista® and Windows Server® 2008. You can use the Netsh LAN commands to configure the local computer or to configure multiple computers by using a logon script. You can also use the netsh LAN commands to view wired 802.1X Group Policy and to administer user wired 802.1X settings.
Wired Network (IEEE 802.3) Policies profiles are read-only, and cannot be modified or deleted by using Netsh LAN commands.
Netsh LAN commands
This section contains the following commands:
- add profile
- delete profile
- export profile
- reconnect
- set autoconfig
- set
profileparameter
- set tracing
- show interfaces
- show profiles
- show settings
- show tracing
The following entries provide details for each command.
add profile
Adds a LAN profile to the specified interface on the computer.
Syntax
add profile filename= PathAndProfileName [[interface=]InterfaceName]
Parameters
- Filename
- Required. Specifies the path and name of the XML file containing the profile data.
- Interface
- Optional. Specifies the name of the interface on which the profile will be set (where InterfaceName is the name of the interface as displayed in Network Connections or as rendered by the netsh lan show interfaces command).
Remarks
The interface parameter specifies one of the interface names shown by the netsh lan show interface command. If the interface is specified, the profile is added to the specified interface. There is wildcard support for this parameter. You can use the characters ? and * to replace a letter and letters of the interface name, respectively.
Example command
- add profile
filename=C:\Users\WiredUser\Documents\profile1.xml interface="Local
Area Connection"
delete profile
Removes a LAN profile from one or multiple interfaces.
Syntax
delete profile interface= InterfaceName
Parameters
- Interface
-
- Required. Specifies the name of the interface on which the
profile is to be deleted (where InterfaceName is the name of
the interface as displayed in Network Connections, or as
rendered by the netsh lan show interfaces command).
- Required. Specifies the name of the interface on which the
profile is to be deleted (where InterfaceName is the name of
the interface as displayed in Network Connections, or as
rendered by the netsh lan show interfaces command).
Remarks
There is wildcard support for the interface parameter. You can use the characters ? and * to replace a letter and letters of the interface name, respectively.
Example commands
- delete profile interface="Local Area Connection"
- delete profile interface=L*
export profile
Saves LAN profiles as XML files to a specified location.
Syntax
export profile folder= PathAndFileName [[interface=]InterfaceName]
Parameters
- Folder
-
- Required. Specifies the path and file name for the profile XML
file.
- Required. Specifies the path and file name for the profile XML
file.
- Interface
- Optional. Specifies the name of the interface on which the profile is configured (where InterfaceName is the name of the interface as displayed in Network Connections, or as rendered by the netsh lan show interfaces command).
Remarks
The folder parameter must specify an existing folder that is accessible from the local computer. It can be either an absolute path or relative path to the current working directory. In addition, "." refers to the current working directory, and ".." refers to the parent directory of the current working directory. The folder name cannot be a Universal Naming Convention (UNC) path.
If the interface parameter is specified, only the specified profile associated with that interface is saved. Otherwise, all profiles on the computer with the specified name are saved.
Profiles of specified interfaces are saved in the format "InterfaceName ProfileName.xml." Profiles at the computer level are saved in the file name format "ProfileName.xml."
There is wildcard support for this parameter. You can use the characters ? and * to replace a letter and letters of the interface name, respectively.
Example commands
- export profile folder=c:\Users\user\Documents\
interface="Local Area Connection"
- export profile folder=c:\Users\user\Documents\
reconnect
Attempts to reauthenticate to a wired network by using the specified interface.
Syntax
reconnect [[interface=]InterfaceName]
Parameters
- Interface
- Optional. Specifies the interface that is used for the connection attempt (where InterfaceName is the name of the interface as displayed in Network Connections, or as rendered by the netsh lan show interfaces command).
Remarks
If the interface parameter is specified, only the specified interface is used for the connection attempt. If the interface parameter is not specified, all interfaces attempt to reconnect. Wildcard (*) names cannot be used to specify the interface name.
Example command
- reconnect interface="Local Area Connection "
set autoconfig
Enables or disables Wired AutoConfig Service on an interface.
Syntax
set autoconfig enabled={yes|no} interface=InterfaceName
Parameters
- Enabled
- Required. Specifies whether to set Wired AutoConfig Service to enabled or disabled.
- Interface
- Required. Specifies the name of the interface on which the service is enabled or disabled (where InterfaceName is the name of the interface as displayed in Network Connections, or as rendered by the netsh lan show interfaces command).
Remarks
When Wired AutoConfig is enabled, computers running Windows Vista and Windows Server 2008 automatically connect to the network by using the specified interface. By default, Wired AutoConfig is enabled.
If Wired AutoConfig is disabled, Windows will not automatically connect to any networks by using the specified interface.
There is wildcard support for the interface parameter. You can use the characters ? and * to replace a letter and letters of the interface name, respectively.
Example command
- set autoconfig enabled=yes interface="Local Area
Connection"
set profileparameter
Sets parameters in a wired network profile.
![]() |
---|
The set profileparameter is only available on computers running Windows Vista with Service Pack 1, and Windows Server 2008. |
Syntax
set profileparameter name= ProfileName [[interface=]InterfaceName] [[authMode=]{machineOrUser|machineOnly|userOnly|guest}] [[ssoMode=]{preLogon|postLogon|none}] [[maxDelay=]1-120] [[allowDialog={yes|no}] [[userVLAN=]{yes|no}]
Parameters
- Name
- Required. Specifies the name of the profile to set (where ProfileName is the name of the profile, as rendered by the netsh lan show profile command).
- Interface
- Optional. Specifies the name of the interface on which the profile is set (where InterfaceName is the name of the interface as displayed in Network Connections, or as rendered by the netsh lan show interfaces command).
- AuthMode
- Optional [conditional, see "Remarks"]. Specifies the type of credentials to be used for authentication.
- SSOMode
- Optional [conditional, see "Remarks"].Specifies the type of single sign on (SSO) to be attempted if any.
- MaxDelay
- Optional [conditional, see "Remarks"]. Specifies the timeout value allowed to establish the single sign-on connection.
- AllowDialog
- Optional [conditional, see "Remarks"].Specifies whether to allow or disallow a dialog to be shown for preLogon.
- UserVLAN
-
- Optional [conditional, see "Remarks"].Specifies if the network
switches to a different VLAN on user authentication.
- Optional [conditional, see "Remarks"].Specifies if the network
switches to a different VLAN on user authentication.
Remarks
Parameter name is required; all other parameters are optional, however, regardless of whether parameter interface is specified, at least one other parameter must be specified.
If the parameter interface is specified then only profiles associated with that interface are modified.
Example commands
- set profileparameter name="Profile 1" authMode=userOnly
ssoMode=preLogon
- set profileparameter name=Profile2 interface="Local Area
Connection" ssoMode=none
set tracing
Enables or disables wired tracing.
Syntax
set tracing [[mode=]{yes|no|persistent}]
Parameters
- Mode
- Required. Specifies whether wired tracing is disabled, enabled and persistent, or enabled and nonpersistent. See "Remarks" for additional information.
Remarks
- If the mode parameter is set to yes,
nonpersistent tracing is active until the mode is either set to
no or the computer is restarted.
- If the mode parameter is set to no, tracing is
stopped for either persistent or nonpersistent tracing.
If the mode parameter is set to persistent, tracing is active even after the computer is restarted.
The default value for the mode parameter is nonpersistent.
Example command
- set tracing mode=persistent
show interfaces
Displays a list of the current wired interfaces on the computer.
Syntax
show interfaces
Parameters
There are no parameters for this command.
Remarks
Shows the wired interfaces configured on the computer.
Displayed information includes:
- The number of interfaces on the computer
- Interface name
- Description
- GUID
- Ethernet adapter IP address
- State [network authentication support (yes or no)]
Example command
- show interfaces
show profiles
Displays a list of wired profiles that are configured on the computer.
Syntax
show profiles [[interface=]InterfaceName]
Parameters
- Interface
- Optional. Specifies the name of the interface which has this profile configured (where InterfaceName is the name of the interface as displayed in Network Connections, or as rendered by the netsh lan show interfaces command). See "Remarks."
Remarks
If the interface parameter is specified, then only the contents of the wired profile for the specified interface are displayed. Otherwise all profiles will be displayed with their name and description.
Example commands
- show profiles interface="Local Area Connection"
- show profiles
show settings
Displays the current global settings of the wired LAN
Syntax
show settings
Parameters
There are no parameters for this command.
Remarks
Shows whether or not auto-configuration logic (Wired AutoConfig) is enabled on each interface.
Example command
- show settings
show tracing
Displays whether wired tracing is enabled or disabled.
Syntax
show tracing
Parameters
There are no parameters for this command.
Remarks
Displayed information includes:
- Wired tracing state (started or stopped)
- Wired tracing persistence state (enabled or disabled)
- Trace log file location (for example,
"c:\Windows\system32\logfiles\WiredAutoLog\"
Example command
- show tracing