testcaoy7 Hi, I have compiled OpenVPN with mbedTLS. I ran "openvpn --show-ciphers" and there are some TLS-PSK ciphers. e.g. TLS-PSK-WITH-AES-128-GCM-SHA256 Does it means it is possible to use "subnet" topology mode without setting a PKI ?