diff --git a/vpnsetup.sh b/vpnsetup.sh
index 71996d6..fd57a1b 100755
--- a/vpnsetup.sh
+++ b/vpnsetup.sh
@@ -244,8 +244,8 @@ conn shared
   dpddelay=30
   dpdtimeout=120
   dpdaction=clear
-  ike=3des-sha1,3des-sha1;modp1024,aes-sha1,aes-sha1;modp1024,aes-sha2,aes-sha2;modp1024,aes256-sha2_512
-  phase2alg=3des-sha1,aes-sha1,aes-sha2,aes256-sha2_512
+  ike=3des-sha1,3des-sha1;modp1024,aes-sha1,aes-sha1;modp1024,aes-sha2,aes-sha2;modp1024,aes256-sha2_512,3des-sha2
+  phase2alg=3des-sha1,aes-sha1,aes-sha2,aes256-sha2_512,3des-sha2
   sha2-truncbug=yes
 
 conn l2tp-psk
diff --git a/vpnsetup_centos.sh b/vpnsetup_centos.sh
index 86516ad..cee3ce3 100755
--- a/vpnsetup_centos.sh
+++ b/vpnsetup_centos.sh
@@ -230,8 +230,8 @@ conn shared
   dpddelay=30
   dpdtimeout=120
   dpdaction=clear
-  ike=3des-sha1,3des-sha1;modp1024,aes-sha1,aes-sha1;modp1024,aes-sha2,aes-sha2;modp1024,aes256-sha2_512
-  phase2alg=3des-sha1,aes-sha1,aes-sha2,aes256-sha2_512
+  ike=3des-sha1,3des-sha1;modp1024,aes-sha1,aes-sha1;modp1024,aes-sha2,aes-sha2;modp1024,aes256-sha2_512,3des-sha2
+  phase2alg=3des-sha1,aes-sha1,aes-sha2,aes256-sha2_512,3des-sha2
   sha2-truncbug=yes
 
 conn l2tp-psk