diff --git a/src/etc/inc/plugins.inc.d/ipsec.inc b/src/etc/inc/plugins.inc.d/ipsec.inc
index 63ed4feba..2b2f29b68 100644
--- a/src/etc/inc/plugins.inc.d/ipsec.inc
+++ b/src/etc/inc/plugins.inc.d/ipsec.inc
@@ -1332,7 +1332,7 @@ function ipsec_configure_do($verbose = false, $interface = '')
 
                 $connection = [
                     'unique' => !empty($ph1ent['unique']) ? $ph1ent['unique'] : 'replace',
-                    'aggressive' => $ph1ent['mode'] ?? '' == 'aggressive' ? 'yes' : 'no',
+                    'aggressive' => ($ph1ent['mode'] ?? '') == 'aggressive' ? 'yes' : 'no',
                     'version' => ($ph1ent['iketype'] ?? '') == 'ikev2' ? 2 : 1,
                     'mobike' => !empty($ph1ent['mobike']) ? 'no' : 'yes',
                     'local_addrs' => $ep,