[strongSwan-dev] A query

Poonam2 Gupta poonam2.gupta at aricent.com
Wed Feb 1 07:40:01 CET 2012


Hi,

How can we achieve SA to be established with only 4 messages?

Regards
Poonam

-----Original Message-----
From: Andreas Steffen [mailto:andreas.steffen at strongswan.org]
Sent: Tuesday, January 31, 2012 5:25 PM
To: Poonam2 Gupta
Cc: dev at lists.strongswan.org
Subject: Re: [strongSwan-dev] A query

Hello Poonam,

you cannot run the IKE protocol without endpoint authentication.
You must at least use a Pre-Shared Key (PSK) known to both ends.

Regards

Andreas

On 01/31/2012 10:13 AM, Poonam2 Gupta wrote:
> Hi,
>
>
>
> We want to setup host to host communication without certificates just
> based on diffhellman exchange and nonces.
>
>
>
> Can pls anyone tell us how to achieve this?
>
>
>
> Regards
>
> Poonam
>

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==




===============================================================================
Please refer to http://www.aricent.com/legal/email_disclaimer.html
for important disclosures regarding this electronic communication.
===============================================================================




More information about the Dev mailing list