diff --git a/src/www/vpn_ipsec_phase1.php b/src/www/vpn_ipsec_phase1.php
index fe5f9f53c..633900c0b 100644
--- a/src/www/vpn_ipsec_phase1.php
+++ b/src/www/vpn_ipsec_phase1.php
@@ -942,6 +942,7 @@ endforeach; ?>
                       <select name="dhgroup">
 <?php
                       $p1_dhgroups = array(
+                        0  => 'off',
                         1  => '1 (768 bit)',
                         2  => '2 (1024 bit)',
                         5  => '5 (1536 bit)',