Optimization mode for VPN servers

From KeeneticOS 3.7, the 'Optimization mode' option has been added to the IPsec-based VPN server settings.

Optimization mode allows you to change the set of supported cryptography algorithms, depending on the mode selected.

In the web interface of the router on the VPN server page in the 'Optimization mode' field, there are 3 preset modes available:

  • Default;
  • For legacy VPN clients;
  • For maximum performance.


Default — All algorithms except DES are enabled.

For legacy VPN clients — Iit allows the use of 3DES/DES algorithms and is only appropriate when clients with older operating systems are unable to establish a connection to the server.

Maximum performance - takes advantage of modern types of ChaCha20Poly1305 cryptography (supported in KeeneticOS and Android / Strongswan) for secure, high-speed connections. 

Was this article helpful?

9 out of 10 found this helpful