Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying (kind of) to create VPN client, I set my server on Ubuntu using OpenSwan (L2tp/IPsec PSK). What I'm doing right now is sending packets to my server and trying to exchange my keys with the server. And here is the thing I am confused about:

  • After Security Association I'm trying to do Key Exchange but I'm not sure if in Key Exchange I should send my coded PSK, or my generated numbers using Diffie-Hellman algorithm?
  • Also how does DH works with PSK? If I understand it right, Server and Client should have different numbers, that both side know from the start and on that basis they generate SecretPassword, so how does it work for PSK?
  • How does Identification after Key Exchange work? Is it sending my PSK encoded with SecretPassword generated earlier or something? Because as far as I know username and password are checked later on, or am I wrong?
share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.