Last updated on November 8, 2021
I'm trying to debug a Cisco VPN setup as part of a Uni Lab (so please don't worry about posting of keys etc. it's just a toy setup with no internet facing connection).
I want to decrypt the IKEv1 traffic I’m capturing to work out what is going wrong. I’ve set up Wireshark as per the attached image with the SPIs for each peer. I think my issue may be with the PSK. It has been set to "SECRET-KEY" in the two endpoints but I’m not sure how to translate it to hex for entering in Wireshark. I’ve tried a direct translation using Cyber Chef "To Hex" but that doesnt seem to be right. Can anyone point me to where I am going wrong please?
Be First to Comment