I don't own a rt-ac68u (only a rt-n66u supported only in the john's fork) so can't take screenshots (that should replace like 1000 words).
The best advice here is to ask your VPN provider support for this option (chacha20-poly1305 cipher) and open a separate thread and I'm sure this community...