diff --git a/src/www/vpn_ipsec_phase1.php b/src/www/vpn_ipsec_phase1.php
index 38e7c9499..4daba82f5 100644
--- a/src/www/vpn_ipsec_phase1.php
+++ b/src/www/vpn_ipsec_phase1.php
@@ -123,7 +123,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'GET') {
         if (isset($config['interfaces']['lan'])) {
             $pconfig['localnet'] = "lan";
         }
-        $pconfig['mode'] = "aggressive";
+        $pconfig['mode'] = "main";
         $pconfig['protocol'] = "inet";
         $pconfig['myid_type'] = "myaddress";
         $pconfig['peerid_type'] = "peeraddress";