How to set priorities for the encryption algorithms in the default IPsec proposal?

RouterOS General
1

Hello,

How to set priorities for the encryption algorithms in the default IPsec proposal?

I have “aes-128 cbc” and “aes-128 ctr” selected, and need now set priority1 to ctr, and priority2 to cbc.

Thank you

Lyly

2

That is not possible in IPsec in general.
To do that, you would have to make different proposals each with a different encryption algorithm, and then tie all those proposals to a policy in some specific order.
However, that does not appear to be possible in RouterOS. There can only be one proposal name in a policy, and all proposals have to have unique names.

So I would say file a feature request, and for now live with this limitation.