Pre-shared-key for VPN Site-To-Site

[MsComX]

Hello guys !

I'm new to the VPN environnement, and trying to configure a site-to-site VPN tunnel between two Fortigate 60D.

At the step "Pre-shared-key", I don't know if it's a specific key to the device (in that case where can i find it ?) or it's a secret word that i can randomly create and share between the two fortigates.

I know that the PSK must be shared before any login/pasword authentification, but my question is:

Where to get the PSK from ? Or I can create it myself ?

Thanks !

[Markus · Accepted solution]

Hi, Welcome to the Forums. You can create the PSK for your self and share between the FGs. https://docs.fortinet.com...pn-with-two-fortigates Best

[Markus · Accepted solution]

Hi, Welcome to the Forums. You can create the PSK for your self and share between the FGs. https://docs.fortinet.com...pn-with-two-fortigates Best

[sw2090 · Accepted solution]

yep psk is a secret word of your choice ;)

So go ahead and choose one. It just has to be the same on both FGT....

[MsComX]

Got it !

Thanks for answering.

[emnoc]

As far as creating one you can do this with bash or perl, of just use a online generator 

https://www.ifm.net.nz/cookbooks/IPSec-Pre-shared-Key-PSK-Generator.html

Ken Felix