IPsec: Add support for ChaCha20-Poly1305

[people/ms/network.git] / config / vpn / security-policies / system

diff --git a/config/vpn/security-policies/system b/config/vpn/security-policies/system
index 311dd9eaba432788b8cc8e6cf0ce9745e8985869..5073447021a46434f1623176de3f3c959a88d9bd 100644 (file)
--- a/config/vpn/security-policies/system
+++ b/config/vpn/security-policies/system
@@ -1,5 +1,5 @@
 KEY_EXCHANGE="ikev2"
-CIPHER="AES256-GCM128 AES192-GCM128 AES128-GCM128 AES256-CBC AES192-CBC AES128-CBC"
+CIPHER="CHACHA20-POLY1305 AES256-GCM128 AES192-GCM128 AES128-GCM128 AES256-CBC AES192-CBC AES128-CBC"
 INTEGRITY="SHA512 SHA384 SHA256"
 GROUP_TYPE="MODP8192 MODP6144 MODP4096 MODP2048 ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
 LIFETIME="28800"