Encryption algorithm question
- 
 Hi all, I am trying to make a routed IPsec configuration on pfSense VM (2.4.4 p3). The other end network engineer says I should match AES-256-CBC for phase 1 encryption algorithm. Unfortunately, I cannot see that option in phase 1. - I can see AES-256. Is this the same as AES-256-CBC?
- If it is not the same, are there any ways that I can make pfSense support AES-256-CBC?
 Thanks a lot. Eoin 
- 
 @eoin 
 Hey https://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites 
- 
 @Konstanti Thanks mate. Much appreciate it. 
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.