How to change defaults for auto-generated ipsec policies?

RouterOS General
1

Hello,

Currently, auto-generated ipsec policies have “Level: require” and “Proposal: default”

How to change these defaults? I need to get all of the auto-generated policies have “Level: unique” and “Proposal: custom”.

IPsec Generate Policy From Template
Why gre+ipsec tunnel always use default proposal?
2

Dynamic policies are generated from a template policy. You need to edit these settings under the template policy and it will generate dynamic policies using these settings.

3

I have already tried edit default template (*T), but it did not help…

4

Any comments, emils?

Your suggestion not work - dynamic policies always created with “Level: require”.

Maybe, its bug in ROS?

5

Unfortunately, level inheritance from template policy will only be available in version 7. It is too big of a change to backport it to v6.