diff --git a/src/etc/inc/ipsec.inc b/src/etc/inc/ipsec.inc
index 5577775444..abd7196865 100644
--- a/src/etc/inc/ipsec.inc
+++ b/src/etc/inc/ipsec.inc
@@ -163,6 +163,9 @@ $p1_dhgroups = array(
 	22 => '22 (1024(sub 160) bit)',
 	23 => '23 (2048(sub 224) bit)',
 	24 => '24 (2048(sub 256) bit)',
+	25 => '25 (nist ecp192)',
+	26 => '26 (nist ecp224)',
+	27 => '27 (brainpool ecp224)',
 	28 => '28 (brainpool ecp256)',
 	29 => '29 (brainpool ecp384)',
 	30 => '30 (brainpool ecp512)',
@@ -229,6 +232,9 @@ $p2_pfskeygroups = array(
 	22 => gettext('22 (1024(sub 160) bit)'),
 	23 => gettext('23 (2048(sub 224) bit)'),
 	24 => gettext('24 (2048(sub 256) bit)'),
+	25 => gettext('25 (nist ecp192)'),
+	26 => gettext('26 (nist ecp224)'),
+	27 => gettext('27 (brainpool ecp224)'),
 	28 => gettext('28 (brainpool ecp256)'),
 	29 => gettext('29 (brainpool ecp384)'),
 	30 => gettext('30 (brainpool ecp512)'),
diff --git a/src/etc/inc/vpn.inc b/src/etc/inc/vpn.inc
index 32712078be..0695418092 100644
--- a/src/etc/inc/vpn.inc
+++ b/src/etc/inc/vpn.inc
@@ -107,6 +107,15 @@ function vpn_ipsec_convert_to_modp($index) {
 		case '24':
 			$conversion = "modp2048s256";
 			break;
+		case '25':
+			$conversion = "ecp192";
+			break;
+		case '26':
+			$conversion = "ecp224";
+			break;
+		case '27':
+			$conversion = "ecp224bp";
+			break;
 		case '28':
 			$conversion = "ecp256bp";
 			break;