Skip to main content

User Manual

Optimization mode for VPN servers

From KeeneticOS 3.7, the 'Optimization mode' option has been added to the IPsec-based VPN server settings.

Optimization mode allows you to change the set of supported cryptography algorithms, depending on the mode selected.

In the web interface of the router on the VPN server page in the 'Optimization mode' field, there are 3 preset modes available:

  • Default;

  • For legacy VPN clients;

  • For maximum performance.

optimization-mode-01-en.png

Default — All algorithms except DES are enabled.

For legacy VPN clients — it allows the use of 3DES/DES algorithms and is only appropriate when clients with older operating systems are unable to establish a connection to the server.

Maximum performance — takes advantage of modern types of ChaCha20 — Poly1305 cryptography (supported in KeeneticOS and Android / Strongswan) for secure, high-speed connections.

In this section: