In a site-to-site VPN configuration, what is an alternate method to the use of pre-shared keys to authenticate each device during connection setup?
certificates
expected IP address of the partner's interface
known hexadecimal string configured in both endpoints matching Proxy ID definitions configured in both endpoints