Hi Harald, > Which one is right? Is the '@' obsolete today? Apparently the PskSecret page > is pretty old. Since what you configure before the : are identities, see [1]. Regards, Tobias [1] https://wiki.strongswan.org/projects/strongswan/wiki/IdentityParsing