diff --git a/usr/local/www/vpn_ipsec_phase1.php b/usr/local/www/vpn_ipsec_phase1.php
index 9f22a68b76..ed941d6155 100644
--- a/usr/local/www/vpn_ipsec_phase1.php
+++ b/usr/local/www/vpn_ipsec_phase1.php
@@ -107,6 +107,11 @@ if (isset($p1index) && $a_phase1[$p1index]) {
 	$pconfig['descr'] = $a_phase1[$p1index]['descr'];
 	$pconfig['nat_traversal'] = $a_phase1[$p1index]['nat_traversal'];
 
+	if (isset($a_phase1[$p1index]['reauth_enable']))
+		$pconfig['reauth_enable'] = true;
+	if (isset($a_phase1[$p1index]['rekey_enable']))
+		$pconfig['rekey_enable'] = true;
+
 	if ($a_phase1[$p1index]['dpd_delay'] &&	$a_phase1[$p1index]['dpd_maxfail']) {
 		$pconfig['dpd_enable'] = true;
 		$pconfig['dpd_delay'] = $a_phase1[$p1index]['dpd_delay'];
@@ -128,6 +133,8 @@ if (isset($p1index) && $a_phase1[$p1index]) {
 	$pconfig['lifetime'] = "28800";
 	$pconfig['nat_traversal'] = "on";
 	$pconfig['dpd_enable'] = true;
+	$pconfig['rekey_enable'] = true;
+	$pconfig['reauth_enable'] = true;
 	$pconfig['iketype'] = "ikev1";
 
 	/* mobile client */
@@ -352,6 +359,11 @@ if ($_POST) {
 		$ph1ent['descr'] = $pconfig['descr'];
 		$ph1ent['nat_traversal'] = $pconfig['nat_traversal'];
 
+		if (isset($pconfig['reauth_enable']))
+			$ph1ent['reauth_enable'] = true;
+		if (isset($pconfig['rekey_enable']))
+			$ph1ent['rekey_enable'] = true;
+
 		if (isset($pconfig['dpd_enable'])) {
 			$ph1ent['dpd_delay'] = $pconfig['dpd_delay'];
 			$ph1ent['dpd_maxfail'] = $pconfig['dpd_maxfail'];
@@ -832,6 +844,20 @@ function dpdchkbox_change() {
 					<tr>
 						<td colspan="2" valign="top" class="listtopic"><?=gettext("Advanced Options"); ?></td>
 					</tr>
+					<tr>
+						<td width="22%" valign="top" class="vncell"><?=gettext("Rekey");?></td>
+						<td width="78%" class="vtable">
+							<input name="rekey_enable" type="checkbox" id="rekey_enable" value="yes" <?php if (isset($pconfig['rekey_enable'])) echo "checked=\"checked\""; ?> />
+							<?=gettext("Whether a connection should be renegotiated when it is about to expire."); ?><br />
+						</td>
+					</tr>
+					<tr>
+						<td width="22%" valign="top" class="vncell"><?=gettext("Reauth");?></td>
+						<td width="78%" class="vtable">
+							<input name="reauth_enable" type="checkbox" id="reauth_enable" value="yes" <?php if (isset($pconfig['reauth_enable'])) echo "checked=\"checked\""; ?> />
+							<?=gettext("whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always don.."); ?><br />
+						</td>
+					</tr>
 					<tr>
 						<td width="22%" valign="top" class="vncell"><?=gettext("NAT Traversal"); ?></td>
 						<td width="78%" class="vtable">