diff --git a/openmptcprouter/files/etc/uci-defaults/2020-omr-vpn b/openmptcprouter/files/etc/uci-defaults/2020-omr-vpn
index 69c3632a7..95d6c3c06 100755
--- a/openmptcprouter/files/etc/uci-defaults/2020-omr-vpn
+++ b/openmptcprouter/files/etc/uci-defaults/2020-omr-vpn
@@ -35,7 +35,7 @@ if [ "$(uci -q get openvpn.omr.proto)" != "tcp-client" ]; then
 		set openvpn.omr=openvpn
 		set openvpn.omr.dev=tun0
 		set openvpn.omr.port=65301
-		set openvpn.omr.cipher=AES-256-CBC
+		set openvpn.omr.cipher=AES-256-GCM
 		set openvpn.omr.proto=tcp-client
 		set openvpn.omr.auth_nocache=1
 		set openvpn.omr.client=1