<div dir="ltr"><div>Hello Noel,</div><div>Thanks for the answer. </div><div><br></div><div>--</div><div>Thanks,</div><div>Aniruddha</div><div><br><div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Apr 29, 2015 at 7:50 PM, Noel Kuntze <span dir="ltr"><<a href="mailto:noel@familie-kuntze.de" target="_blank">noel@familie-kuntze.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA256<br>
<br>
Hello Aniruddha,<br>
<br>
Yes, specify the ID of the participant as ID in the secrets configuration.<br>
<br>
Example:<br>
<br>
connections {<br>
        home {<br>
                local {<br>
                        id = home<br>
                        auth = psk<br>
                }<br>
<br>
                remote {<br>
                        id = gw<br>
                        auth = psk<br>
                }<br>
                children {<br>
                       home {<br>
                }<br>
        }<br>
}<br>
<br>
secrets {<br>
        ike-home {<br>
                id  = gw<br>
                secret = foobar<br>
        }<br>
}<br>
<br>
Mit freundlichen Grüßen/Kind Regards,<br>
Noel Kuntze<br>
<br>
GPG Key ID: 0x63EC6658<br>
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658<br>
<div><div class="h5"><br>
Am 29.04.2015 um 20:52 schrieb Aniruddha Atale:<br>
> Hello,<br>
> Is there a way by which I can specify pre-shared-keys per connection endpoint. I am looking at examples config files from <a href="http://www.strongswan.org/uml/testresults/swanctl/" target="_blank">http://www.strongswan.org/uml/testresults/swanctl/</a> and it seems that I can only specify PSK per host-ip and not per pair of IP.<br>
><br>
> In the example below, I have three hosts "home", "carol" and "dave". I want host "home" to use different PSK key based on weather its talking to carol or dave.<br>
><br>
> Is this possible? What would the file swanctl.conf file look like?<br>
><br>
> --<br>
> Thanks,<br>
> Aniruddha<br>
><br>
><br>
> -- swanctl.conf example --<br>
> secrets {<br>
>   ike-home {<br>
>       id = 192.168.0.1<br>
>       secret = 0pBpZAZqEN6Ti9sqt4ZP5EWqrt<br>
>    }<br>
> ike-carol {<br>
>       id = 192.168.0.100<br>
>       secret = 0sFpZAZqEN6Ti9sqt4ZP5EWcqx<br>
>    }<br>
>    ike-dave {<br>
>       id = 192.168.0.200<br>
>       secret = 0sjVzONCF02ncsgiSlmIXeqhGN<br>
>    }<br>
> }<br>
><br>
><br>
><br>
><br>
</div></div>> _______________________________________________<br>
> Users mailing list<br>
> <a href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a><br>
> <a href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank">https://lists.strongswan.org/mailman/listinfo/users</a><br>
<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v2<br>
<br>
iQIcBAEBCAAGBQJVQW5RAAoJEDg5KY9j7GZYYcoP/1kXd+c/cGtXkKmKlTq0Y4Kz<br>
MZiR+NRaEN8X+39Ro4LyQBHdj1FBk9aMpqpADsa3v/22lCgUsZfl7vxEIgOE1++L<br>
A3x5Oiq7NUiVXumeE6TqFN6+7He33lHESejd3BSX1t/deWhFcDjnHC9FmJL+NbSv<br>
um9ZF8yCfGjdfmilW4AmVDAqLob3/imImGZeW33FI+myWr5k0GFueJM8+jZJle7u<br>
bxCAdKV8F4spEmOKT5CGUS2IcmCtRlnLqmx4K6tm2rf55f5MVn7RDzC0AvwKmDKb<br>
z+0b2krBHvOWpix21Ww+8vbrCrH6keNMCcMVzd8AeRgwPgvly8G44Tz3Rj1P1BNl<br>
/JV2WP8bJ2sow8dF98HCILm21CSLQBB/vPK9B2bqB3LVzUKXz+iR9iBVv2FikcRU<br>
fLP36bGYVWRzU1GH/bV2+zpd1ELMu4j2JA7tMhBIVAQrhDXo3r7Tg5Hu0kIWvPu1<br>
RY9tSVmzEniENNDPnAwpZ49mxZikCcfbHqzUq5vZ4ziOqzUlbGe+tiA1n5OFjTfS<br>
r/a1G6oEzDDDn4Gfe2A6UAdDrVIt2q+fKrD6cCIrg2no6x6bJjmLrU4z3mcH2+sz<br>
Cc6DvVRx+fSl2oIVL0G0Mlt8TbCBpD6GiAw1b8WyXzok5k6lky/Kv63MV+KaCd4w<br>
WxaYvfzRFJvBE9tj/rak<br>
=HtSx<br>
-----END PGP SIGNATURE-----<br>
<br>
</blockquote></div><br></div></div></div></div>