You're almost there! Please answer a few more questions for access to the Applications content. Complete registration
Interested in joining? Complete your registration by providing Areas of Interest here. Register

Oci site to site vpn

in Database 2 comments

Hi Team,

We are configuring a Site-to-Site VPN between OCI and our on-premises data center. During the configuration, we came across the Diffie-Hellman (DH) group used in IKE negotiation.

My question is: How does authentication happen between OCI and the on-premises VPN device without transmitting the Pre-Shared Key (PSK) over the network?

Does Diffie-Hellman help both VPN endpoints derive the same cryptographic session keys without exchanging the actual keys? If so, how is the PSK used to authenticate the VPN peers, and how are the session keys generated securely?

Could you pls help us understand.

Thank you,

Sgu

Tagged:

Howdy, Stranger!

Log In

To view full details, sign in.

Register

Don't have an account? Click here to get started!