Change IPsec tunnel preshared key

Forum|Forum|9 years ago
March 2, 2017
3 replies
16406 views

How can I change the IPsec tunnel preshared key? It can't be done in the gui. When I edit my tunnel and select the option for preshared key, the field key entry field doesn't appear like it does when creating a new tunnel. Is there a way to do this in the cli? So far I haven't found it.

Best answer by ede_pfau

Yes it will.

CollabraITAuthor

New Member

From the cli, editing my tunnel in

config vpn ipsec phase1-interface

If I type "set psksecret" and a new key, will that replace the existing preshared key and encode it?

ede_pfauAnswer

SuperUser

Yes it will.

Toshi_Esumi

SuperUser

Yes, it does.

CollabraITAuthor

New Member

Thanks guys.

Toshi_Esumi

SuperUser

With CLI you can even copy and paste the encrypted PSK (ENC) to other phase1-interface without knowing the original PSK. That's how we migrate IPSecs from one FG to another as long as the software version is the same or close enough.

mpandya

Staff

Yes

Sign up

Login with SSO

Login to the community

Login with SSO