diff --git a/src/content/partials/magic-transit/tunnels-reference/tunnels-encapsulation-opening.mdx b/src/content/partials/magic-transit/tunnels-reference/tunnels-encapsulation-opening.mdx
index 29e55d88bc9def8..267f5c499263c4e 100644
--- a/src/content/partials/magic-transit/tunnels-reference/tunnels-encapsulation-opening.mdx
+++ b/src/content/partials/magic-transit/tunnels-reference/tunnels-encapsulation-opening.mdx
@@ -122,7 +122,7 @@ IKE SA is sometimes referred to as Phase 1 as per IKEv1 language.
   Below is a list of all Diffie-Hellman (DH) groups supported by Cloudflare.
 
   :::caution
-  Cloudflare recommends that you use only one DH group when configuring your device, specifically **DH group 14**.
+  Cloudflare recommends that you use only one DH group when configuring your device, specifically **DH group 20**.
   :::
 
   - DH group 20 (384-bit random ECP group)
@@ -159,7 +159,7 @@ The Child SA. Sometimes referred to as Phase 2 as per IKEv1 language.
   Below is a list of all Diffie-Hellman (DH) groups supported by Cloudflare.
 
   :::caution
-  Cloudflare recommends that you use only one DH group when configuring your device, specifically **DH group 14**.
+  Cloudflare recommends that you use only one DH group when configuring your device, specifically **DH group 20**.
   :::
 
   - DH group 20 (384-bit random ECP group)