OPNsense Forum

Archive => 20.1 Legacy Series => Topic started by: nzkiwi68 on June 16, 2020, 12:11:36 am

Title: Feature request - IPSEC P2 gui default changes
Post by: nzkiwi68 on June 16, 2020, 12:11:36 am
Change the defaults:

Remote Network:
Subnet: /24
Encryption algorithms: AES auto
Hash algorithms: SHA256

or - even better, to what I actually always select.
(But I do understand if AES auto is preferred. It's just that aesgcm is considerably faster.)

Remote Network:
Subnet: /24
Encryption algorithms: aes128gcm16
Hash algorithms: none

Change the hint:
Hint: use AES or aesgcm. It's widely supported, considered secure and hardware accelerated if you have AES-NI CPU support.