From KeeneticOS 3.7, the 'Optimization mode' option has been added to the IPsec-based VPN server settings.
Optimization mode allows you to change the set of supported cryptography algorithms, depending on the mode selected.
In the web interface of the router on the VPN server page in the 'Optimization mode' field, there are 3 preset modes available:
- For legacy VPN clients;
- For maximum performance.
Default — All algorithms except DES are enabled.
For legacy VPN clients — Iit allows the use of 3DES/DES algorithms and is only appropriate when clients with older operating systems are unable to establish a connection to the server.