I have some VPN between some routers.
The routers have available some different encryption levels because some road warriors/clients has different support but I want to join some routers together and use in this situation aes-256-gcm, but if I have other options available… they use "always cbc-aes (I think is aes-256-cbc).
How can I force the use on one connection?
Do you understand me? Maybe I am not explaining well..
Here the proposal:
/ip ipsec proposal
set [ find default=yes ] auth-algorithms=sha512,sha256,sha1 enc-algorithms=aes-256-cbc,aes-256-gcm,aes-192-cbc,3des
I need to have aes-256-cbc because some “clients” and connecting using this, but with other mikrotik routers, I want to connect using aes-256-gcm
Thank youuuu