X-Git-Url: http://git.ipfire.org/?p=people%2Fms%2Fnetwork.git;a=blobdiff_plain;f=config%2Fvpn%2Fsecurity-policies%2Fsystem;h=6ceb0c4859a44f5ccb8c42d96536a46ffe6d6b50;hp=ce7cb7ae33d65412d00200d04fae7a7a00d714bf;hb=HEAD;hpb=a51e22bd77ccf270f32b11a0167cb5d737149897

diff --git a/config/vpn/security-policies/system b/config/vpn/security-policies/system
index ce7cb7ae..6ceb0c48 100644
--- a/config/vpn/security-policies/system
+++ b/config/vpn/security-policies/system
@@ -1,7 +1,7 @@
 KEY_EXCHANGE="ikev2"
-CIPHERS="CHACHA20-POLY1305 AES256-GCM128 AES192-GCM128 AES128-GCM128 AES256-CBC AES192-CBC AES128-CBC"
-INTEGRITY="SHA512 SHA384 SHA256"
-GROUP_TYPE="MODP8192 MODP6144 MODP4096 MODP2048 ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
+CIPHERS="CHACHA20-POLY1305 AES256-GCM128 AES256-CBC AES192-GCM128 AES192-CBC AES128-GCM128 AES128-CBC"
+INTEGRITIES="SHA512 SHA384 SHA256"
+GROUP_TYPES="CURVE25519 CURVE448 ECP521 ECP384 ECP256 ECP224 ECP192 MODP8192 MODP6144 MODP4096 MODP2048"
 PSEUDO_RANDOM_FUNCTIONS="SHA512 SHA384 SHA256"
 LIFETIME="28800"
 PFS="on"