PowerShell Network

Get-NetAdapter | Format-Table Name, InterfaceDescription, Status, LinkSpeed, MacAddress

Get-NetAdapter | Select-Object Name, Status, MacAddress, LinkSpeed,
    @{N='Driver';E={$_.DriverDescription}},
    @{N='VLAN';E={$_.VlanID}}

Get-NetAdapter -Name "Wi-Fi"
Get-NetAdapter -Name "Ethernet*"

Get-NetAdapter | Where-Object Status -eq 'Up' | ForEach-Object {
    $ip = Get-NetIPAddress -InterfaceIndex $_.ifIndex -AddressFamily IPv4 -ErrorAction SilentlyContinue
    [PSCustomObject]@{
        Adapter  = $_.Name
        Status   = $_.Status
        Speed    = $_.LinkSpeed
        MAC      = $_.MacAddress
        IPv4     = $ip.IPAddress
        Prefix   = $ip.PrefixLength
    }
} | Format-Table

Disable-NetAdapter -Name "Ethernet" -Confirm:$false
Enable-NetAdapter -Name "Ethernet" -Confirm:$false

Rename-NetAdapter -Name "Ethernet" -NewName "Corp-LAN"

Get-NetAdapterStatistics | Select-Object Name, ReceivedBytes, SentBytes,
    @{N='ReceivedMB';E={[math]::Round($_.ReceivedBytes/1MB,2)}},
    @{N='SentMB';E={[math]::Round($_.SentBytes/1MB,2)}}

Restart-NetAdapter -Name "Wi-Fi"

Get-NetAdapter -Physical

Get-NetAdapter | Select-Object Name, Status, MediaConnectionState,
    @{N='Problems';E={(Get-PnpDevice -InstanceId $_.PnPDeviceID).Problem}}

Get-NetAdapter | Where-Object Status -eq 'Up' | ForEach-Object {
    $adapter = $_
    $ip = Get-NetIPAddress -InterfaceIndex $_.ifIndex -AddressFamily IPv4 -EA SilentlyContinue
    $gw = Get-NetRoute -InterfaceIndex $_.ifIndex -DestinationPrefix "0.0.0.0/0" -EA SilentlyContinue
    $dns = Get-DnsClientServerAddress -InterfaceIndex $_.ifIndex -AddressFamily IPv4 -EA SilentlyContinue

    [PSCustomObject]@{
        Adapter   = $adapter.Name
        Status    = $adapter.Status
        Speed     = $adapter.LinkSpeed
        MAC       = $adapter.MacAddress
        IPv4      = $ip.IPAddress
        Gateway   = $gw.NextHop
        DNS       = ($dns.ServerAddresses -join ", ")
    }
} | Format-List

Get-NetAdapter | Where-Object Status -eq 'Up' | ForEach-Object {
    $ip = (Get-NetIPAddress -InterfaceIndex $_.ifIndex -AddressFamily IPv4 -EA SilentlyContinue).IPAddress
    "$($_.Name): $ip [$($_.LinkSpeed)]"
}

$targets = @(
    @{Name="Gateway"; Host="10.50.1.1"},
    @{Name="DNS"; Host="10.50.1.50"},
    @{Name="Internet"; Host="8.8.8.8"},
    @{Name="Web"; Host="www.google.com"}
)

$targets | ForEach-Object {
    $result = Test-NetConnection -ComputerName $_.Host -WarningAction SilentlyContinue
    [PSCustomObject]@{
        Target = $_.Name
        Host   = $_.Host
        Ping   = if($result.PingSucceeded){"OK"}else{"FAIL"}
    }
} | Format-Table -AutoSize

$target = "10.50.1.1"
$results = 1..10 | ForEach-Object {
    $ping = Test-Connection -ComputerName $target -Count 1 -EA SilentlyContinue
    if ($ping) { $ping.ResponseTime } else { -1 }
}
$success = ($results | Where-Object { $_ -ge 0 }).Count
$avgLatency = ($results | Where-Object { $_ -ge 0 } | Measure-Object -Average).Average

Write-Host "Target: $target"
Write-Host "Success: $success/10"
Write-Host "Avg Latency: $([math]::Round($avgLatency,2)) ms"

$report = @()
$report += "=== ADAPTERS ==="
$report += Get-NetAdapter | Format-Table -AutoSize | Out-String
$report += "`n=== IP CONFIG ==="
$report += Get-NetIPConfiguration | Out-String
$report += "`n=== ROUTES ==="
$report += Get-NetRoute -AddressFamily IPv4 | Format-Table -AutoSize | Out-String
$report += "`n=== DNS ==="
$report += Get-DnsClientServerAddress -AddressFamily IPv4 | Format-Table -AutoSize | Out-String
$report | Out-File "$env:TEMP\network-report.txt"
Write-Host "Report saved to $env:TEMP\network-report.txt"

Get-NetIPConfiguration -Detailed

Get-NetIPAddress -AddressFamily IPv4 |
    Where-Object { $_.InterfaceAlias -notmatch 'Loopback' } |
    Select-Object InterfaceAlias, IPAddress, PrefixLength

Get-NetRoute -DestinationPrefix 0.0.0.0/0 | Select-Object InterfaceAlias, NextHop

Get-DnsClientServerAddress -AddressFamily IPv4 |
    Where-Object ServerAddresses |
    Select-Object InterfaceAlias, ServerAddresses

New-NetIPAddress -InterfaceAlias "Ethernet" -IPAddress "10.50.1.100" -PrefixLength 24 -DefaultGateway "10.50.1.1"

Remove-NetIPAddress -InterfaceAlias "Ethernet" -IPAddress "10.50.1.100" -Confirm:$false

Set-NetIPInterface -InterfaceAlias "Ethernet" -Dhcp Enabled
Set-DnsClientServerAddress -InterfaceAlias "Ethernet" -ResetServerAddresses

Set-DnsClientServerAddress -InterfaceAlias "Ethernet" -ServerAddresses "10.50.1.50","10.50.1.51"

Clear-DnsClientCache

Get-DnsClientCache | Select-Object Entry, Data, TimeToLive

$adapter = Get-NetAdapter -Name "Ethernet"
$adapter | Set-NetIPInterface -Dhcp Enabled
Restart-NetAdapter -Name $adapter.Name

Test-NetConnection -ComputerName "google.com"

Test-NetConnection -ComputerName "10.50.1.1" -Port 443 -InformationLevel Detailed

Test-NetConnection -ComputerName "google.com" -TraceRoute | Select-Object -ExpandProperty TraceRoute

Get-NetTCPConnection | Where-Object State -eq 'Established' |
    Select-Object LocalAddress, LocalPort, RemoteAddress, RemotePort,
        @{N='Process';E={(Get-Process -Id $_.OwningProcess).Name}} |
    Sort-Object LocalPort

Get-NetTCPConnection -LocalPort 8080 |
    Select-Object LocalPort, @{N='Process';E={(Get-Process -Id $_.OwningProcess).ProcessName}}

Get-NetFirewallProfile | Select-Object Name, Enabled, DefaultInboundAction, DefaultOutboundAction

Set-NetFirewallProfile -Profile Private -Enabled True
Set-NetFirewallProfile -Profile Public -Enabled True

Get-NetFirewallRule | Select-Object Name, DisplayName, Enabled, Direction, Action

Get-NetFirewallRule -DisplayName "*Remote Desktop*"

Get-NetFirewallRule -Direction Inbound -Enabled True |
    Select-Object DisplayName, @{N='Port';E={($_ | Get-NetFirewallPortFilter).LocalPort}}

New-NetFirewallRule -DisplayName "Allow SSH" -Direction Inbound -Protocol TCP -LocalPort 22 -Action Allow

New-NetFirewallRule -DisplayName "Allow MyApp" -Direction Inbound -Program "C:\Apps\myapp.exe" -Action Allow

New-NetFirewallRule -DisplayName "Block BadIP" -Direction Outbound -RemoteAddress "1.2.3.4" -Action Block

Remove-NetFirewallRule -DisplayName "Allow SSH"

Enable-NetFirewallRule -DisplayName "Remote Desktop*"
Disable-NetFirewallRule -DisplayName "Remote Desktop*"

netsh advfirewall export "C:\Backup\firewall-rules.wfw"

netsh advfirewall import "C:\Backup\firewall-rules.wfw"

Get-NetFirewallRule -Direction Inbound -Enabled True |
    Where-Object { ($_ | Get-NetFirewallPortFilter).LocalPort -eq 3389 } |
    Select-Object DisplayName, Enabled

Get-NetAdapter -Physical | Where-Object { $_.MediaType -eq "802.3" -or $_.InterfaceDescription -match "Ethernet|LAN|Realtek|Intel.*Ethernet" }

Get-NetAdapter -Name "Ethernet*" | Select-Object Name, Status, LinkSpeed, MacAddress, MediaConnectionState

Get-NetAdapter -Physical | Select-Object Name, Status, MediaConnectionState,
    @{N='Cable';E={if($_.MediaConnectionState -eq 'Connected'){'Plugged'}else{'Unplugged'}}}

Get-NetConnectionProfile | Where-Object InterfaceAlias -match "Ethernet" |
    Select-Object InterfaceAlias, Name, NetworkCategory, IPv4Connectivity

Set-NetConnectionProfile -InterfaceAlias "Ethernet" -NetworkCategory Private
# Options: Private, Public, DomainAuthenticated (auto-detected)

netsh lan show profiles

netsh lan show profiles interface="Ethernet"

netsh lan export profile folder="$env:TEMP" interface="Ethernet"

netsh lan add profile filename="$env:TEMP\Ethernet.xml" interface="Ethernet"

# Enable
netsh lan set autoconfig enabled=yes interface="Ethernet"
# Disable
netsh lan set autoconfig enabled=no interface="Ethernet"

Get-NetAdapterAdvancedProperty -Name "Ethernet" |
    Select-Object DisplayName, DisplayValue, RegistryKeyword |
    Format-Table -AutoSize

# View current setting
Get-NetAdapterAdvancedProperty -Name "Ethernet" -DisplayName "Speed & Duplex"

# Set to specific value (varies by driver)
Set-NetAdapterAdvancedProperty -Name "Ethernet" -DisplayName "Speed & Duplex" -DisplayValue "100 Mbps Full Duplex"

Set-NetAdapterAdvancedProperty -Name "Ethernet" -DisplayName "Jumbo Packet" -DisplayValue "9014 Bytes"

Get-NetAdapterAdvancedProperty -Name "Ethernet" | Where-Object DisplayName -match "Wake"

Get-NetAdapterStatistics -Name "Ethernet" | Select-Object Name,
    @{N='ReceivedGB';E={[math]::Round($_.ReceivedBytes/1GB,3)}},
    @{N='SentGB';E={[math]::Round($_.SentBytes/1GB,3)}},
    ReceivedUnicastPackets, SentUnicastPackets,
    ReceivedDiscards, OutboundDiscards, InboundErrors, OutboundErrors

$stats = Get-NetAdapterStatistics -Name "Ethernet"
if ($stats.InboundErrors -gt 0 -or $stats.OutboundErrors -gt 0) {
    Write-Host "ERRORS DETECTED!" -ForegroundColor Red
    Write-Host "Inbound Errors:  $($stats.InboundErrors)"
    Write-Host "Outbound Errors: $($stats.OutboundErrors)"
    Write-Host "Check cable, switch port, or driver"
} else {
    Write-Host "No errors - connection healthy" -ForegroundColor Green
}

Restart-NetAdapter -Name "Ethernet"

Disable-NetAdapter -Name "Ethernet" -Confirm:$false
Enable-NetAdapter -Name "Ethernet" -Confirm:$false

# Lower metric = higher priority
Set-NetIPInterface -InterfaceAlias "Ethernet" -InterfaceMetric 10
Set-NetIPInterface -InterfaceAlias "Wi-Fi" -InterfaceMetric 100

Get-NetAdapter | Where-Object Status -eq 'Up' |
    Select-Object Name, InterfaceDescription,
        @{N='SpeedGbps';E={[math]::Round($_.LinkSpeed.Split()[0]/1000,2)}},
        Status | Format-Table -AutoSize

Get-VpnConnection | Select-Object Name, ServerAddress, TunnelType, AuthenticationMethod, ConnectionStatus

Get-VpnConnection -AllUserConnection

rasdial "VPN-Name"
# Or with credentials
rasdial "VPN-Name" username password

# Note: Does not support passing credentials directly for security
Start-Process "rasphone" -ArgumentList "-d `"VPN-Name`""

rasdial "VPN-Name" /disconnect

rasdial | Select-String "Connected" | ForEach-Object {
    $vpnName = ($_ -split ":")[0].Trim()
    rasdial $vpnName /disconnect
}

Get-VpnConnection | Where-Object ConnectionStatus -eq "Connected" | Select-Object Name, ServerAddress

Add-VpnConnection -Name "CorpVPN" `
    -ServerAddress "vpn.company.com" `
    -TunnelType IKEv2 `
    -AuthenticationMethod MachineCertificate `
    -EncryptionLevel Required `
    -RememberCredential

Add-VpnConnection -Name "SiteVPN" `
    -ServerAddress "vpn.site.com" `
    -TunnelType L2tp `
    -L2tpPsk "YourPreSharedKey" `
    -AuthenticationMethod Pap `
    -EncryptionLevel Optional `
    -Force

Add-VpnConnection -Name "SSTP-VPN" `
    -ServerAddress "vpn.company.com" `
    -TunnelType Sstp `
    -AuthenticationMethod MSChapv2 `
    -EncryptionLevel Required

Remove-VpnConnection -Name "OldVPN" -Force

Set-VpnConnection -Name "CorpVPN" -SplitTunneling $true

Add-VpnConnectionRoute -ConnectionName "CorpVPN" -DestinationPrefix "10.0.0.0/8"
Add-VpnConnectionRoute -ConnectionName "CorpVPN" -DestinationPrefix "172.16.0.0/12"
Add-VpnConnectionRoute -ConnectionName "CorpVPN" -DestinationPrefix "192.168.0.0/16"

Get-VpnConnectionRoute -ConnectionName "CorpVPN"

Set-VpnConnection -Name "CorpVPN" -DnsSuffix "corp.company.com"

Add-VpnConnection -Name "CertVPN" `
    -ServerAddress "vpn.company.com" `
    -TunnelType IKEv2 `
    -AuthenticationMethod Eap `
    -EncryptionLevel Required
# Then configure EAP settings in rasphone.exe UI or via XML

Copy-Item "$env:APPDATA\Microsoft\Network\Connections\Pbk\rasphone.pbk" "$env:TEMP\vpn-backup.pbk"

# Recent VPN events
Get-WinEvent -LogName "Application" -MaxEvents 50 |
    Where-Object { $_.ProviderName -match "RasClient|Rasman" } |
    Select-Object TimeCreated, Message

# Check VPN adapter
Get-NetAdapter | Where-Object InterfaceDescription -match "VPN|WAN Miniport"

Get-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings" |
    Select-Object ProxyEnable, ProxyServer, ProxyOverride, AutoConfigURL

netsh winhttp show proxy

[System.Net.WebRequest]::GetSystemWebProxy()

$proxy = [System.Net.WebRequest]::GetSystemWebProxy()
$proxy.GetProxy("https://www.google.com")

Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings" -Name ProxyEnable -Value 1
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings" -Name ProxyServer -Value "proxy.company.com:8080"

Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings" `
    -Name ProxyOverride -Value "*.local;10.*;192.168.*;172.16.*;<local>"

Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings" -Name ProxyEnable -Value 0

Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings" `
    -Name AutoConfigURL -Value "http://wpad.company.com/proxy.pac"

netsh winhttp import proxy source=ie

netsh winhttp set proxy proxy-server="proxy.company.com:8080" bypass-list="*.local;10.*"

netsh winhttp reset proxy

$proxy = New-Object System.Net.WebProxy("http://proxy.company.com:8080", $true)
[System.Net.WebRequest]::DefaultWebProxy = $proxy

# With credentials
$proxy.Credentials = [System.Net.CredentialCache]::DefaultNetworkCredentials

$env:HTTP_PROXY = "http://proxy.company.com:8080"
$env:HTTPS_PROXY = "http://proxy.company.com:8080"
$env:NO_PROXY = "localhost,127.0.0.1,.local,10.*"

Invoke-WebRequest -Uri "https://www.google.com" -Proxy "http://proxy.company.com:8080" -ProxyUseDefaultCredentials

$directTest = Test-NetConnection -ComputerName "www.google.com" -Port 443 -WarningAction SilentlyContinue
if (-not $directTest.TcpTestSucceeded) {
    Write-Host "Direct connection failed - likely behind proxy"
    try {
        $response = Invoke-WebRequest -Uri "https://www.google.com" -UseDefaultCredentials -TimeoutSec 10
        Write-Host "Proxy connection: OK (Status: $($response.StatusCode))"
    } catch {
        Write-Host "Proxy connection: FAILED"
    }
} else {
    Write-Host "Direct connection: OK"
}

$proxy = [System.Net.WebRequest]::GetSystemWebProxy()
$proxy.Credentials = [System.Net.CredentialCache]::DefaultNetworkCredentials
try {
    $request = [System.Net.WebRequest]::Create("https://www.google.com")
    $request.Proxy = $proxy
    $response = $request.GetResponse()
    Write-Host "Proxy auth: OK"
    $response.Close()
} catch {
    Write-Host "Proxy auth: FAILED - $($_.Exception.Message)"
}

# === ADAPTERS ===
Get-NetAdapter | ft Name, Status, LinkSpeed           # What's connected?
Get-NetAdapter -Physical                               # Physical adapters only
Restart-NetAdapter -Name "Ethernet"                    # Restart (like unplug/replug)

# === IP CONFIG ===
Get-NetIPAddress -AddressFamily IPv4 | ? InterfaceAlias -notmatch Loopback | ft InterfaceAlias, IPAddress
Get-NetIPConfiguration -Detailed                       # Full ipconfig /all
Clear-DnsClientCache                                   # Flush DNS

# === WIFI ===
netsh wlan show networks                               # Available networks
netsh wlan show networks mode=bssid                    # With signal/security
netsh wlan show profiles                               # Saved networks
netsh wlan show profile name="X" key=clear             # Profile with password (Admin)
netsh wlan show interfaces                             # Current connection
netsh wlan connect name="NetworkName"                  # Connect
netsh wlan disconnect                                  # Disconnect
netsh wlan delete profile name="NetworkName"           # Forget network
netsh wlan export profile folder="C:\Temp" key=clear   # Export to XML
netsh wlan add profile filename="profile.xml"          # Import from XML

# === ETHERNET ===
netsh lan show interfaces                              # Wired 802.1X status
netsh lan show profiles                                # Wired profiles
Get-NetAdapterStatistics -Name "Ethernet"              # Traffic stats

# === CONNECTIVITY ===
Test-NetConnection 10.50.1.1                           # Ping test
Test-NetConnection google.com -Port 443                # Port check
Test-NetConnection google.com -TraceRoute              # Trace route

# === VPN ===
Get-VpnConnection                                      # List VPNs
rasdial "VPN-Name"                                     # Connect VPN
rasdial "VPN-Name" /disconnect                         # Disconnect VPN

# === PROXY ===
netsh winhttp show proxy                               # System proxy

# All saved WiFi passwords (Admin)
(netsh wlan show profiles) -match "All User" -replace ".*:\s+","" | % { $n=$_; $p=(netsh wlan show profile name="$n" key=clear) -match "Key Content" -replace ".*:\s+",""; "$n`: $p" }

# Quick network status
Get-NetAdapter | ? Status -eq Up | % { "$($_.Name): $((Get-NetIPAddress -InterfaceIndex $_.ifIndex -AddressFamily IPv4 -EA 0).IPAddress) [$($_.LinkSpeed)]" }

# Am I on corporate network?
(Get-NetConnectionProfile).NetworkCategory -contains 'DomainAuthenticated'

# Export all WiFi profiles
netsh wlan export profile folder="$env:TEMP\wifi" key=clear

# Compare available vs saved WiFi
$s=(netsh wlan show profiles) -match "All User" -replace ".*:\s+",""; netsh wlan show networks | % { if($_ -match "SSID \d+ : (.+)"){ if($matches[1] -in $s){"[SAVED] $($matches[1])"}else{"[NEW] $($matches[1])"} } }

# 1. Check adapter status
Get-NetAdapter | ft Name, Status, MediaConnectionState

# 2. Check IP config
Get-NetIPConfiguration | Select InterfaceAlias, IPv4Address, IPv4DefaultGateway, DNSServer

# 3. Test gateway
Test-NetConnection (Get-NetRoute -DestinationPrefix 0.0.0.0/0).NextHop

# 4. Test DNS
Resolve-DnsName google.com

# 5. Test internet
Test-NetConnection 8.8.8.8

# 6. Check for errors
Get-NetAdapterStatistics | ? { $_.InboundErrors -gt 0 -or $_.OutboundErrors -gt 0 }

netsh wlan show profile name=CHLA-Remote |
  ConvertTo-Json | jq '.'                                    (1)

netsh wlan show profile name=CHLA-Remote |
  ConvertTo-Json |
  jq -e '
    map(select(test("WPA2-Enterprise|TEAP|802.1X"))) |
    length == 3
  '                                                          (1)

netsh wlan show profile name=CHLA-Remote |
  ConvertTo-Json |
  jq '
    .[] |
    select(test(" : ")) |
    split(" : ") |
    {
      key: (.[0] | gsub("\\s+$";"")),
      value: (.[1] | gsub("^\\s+";""))
    }
  '                                                          (1)

netsh wlan show profile name=CHLA-Remote |
  ConvertTo-Json | jq '.' | bat --paging=always              (1)

Get-NetAdapter -Name "Wi-Fi"                                 (1)

Get-NetAdapter |
  Select-Object Name, Status, MediaConnectionState,
    @{N='Problems';E={                                       (1)
      (Get-PnpDevice -InstanceId $_.PnPDeviceID).Problem
    }}

Get-NetAdapter | Where-Object Status -eq 'Up' |
  ForEach-Object {
    $ip = Get-NetIPAddress `
      -InterfaceIndex $_.ifIndex `
      -AddressFamily IPv4 `
      -ErrorAction SilentlyContinue                          (1)
    [PSCustomObject]@{
      Adapter  = $_.Name
      Status   = $_.Status
      Speed    = $_.LinkSpeed
      MAC      = $_.MacAddress
      IPv4     = $ip.IPAddress
      Prefix   = $ip.PrefixLength
    }
  } | Format-Table                                           (2)

Get-NetAdapter | ConvertTo-Json | jq '.'                     (1)

netsh wlan show networks mode=bssid                          (1)

netsh wlan show networks | Select-String CHLA-Remote         (1)
netsh wlan show networks | Select-String Domus-IoT           (2)

Get-Service |
  ConvertTo-Json |
  jq '[.[] | select(.Status == "Running") | .Name] | length' (1)