diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index a148d0e116..9c1e6db218 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -342,8 +342,12 @@ function vpn_ipsec_configure($restart = false)
 		$unity_enabled = 'no';
 	}
 
-	if (!empty($ifacesuse)) {
-		$ifacesuse = 'interfaces_use = ' . implode(',', array_unique($ifacesuse));
+	if (isset($config['ipsec']['enableinterfacesuse'])) {
+		if (!empty($ifacesuse)) {
+			$ifacesuse = 'interfaces_use = ' . implode(',', array_unique($ifacesuse));
+		} else {
+			$ifacesuse = '';
+		}
 	} else {
 		$ifacesuse = '';
 	}
diff --git a/usr/local/www/vpn_ipsec_settings.php b/usr/local/www/vpn_ipsec_settings.php
index 39c1862b66..c944ef77ee 100644
--- a/usr/local/www/vpn_ipsec_settings.php
+++ b/usr/local/www/vpn_ipsec_settings.php
@@ -47,6 +47,7 @@ foreach ($ipsec_loglevels as $lkey => $ldescr) {
 }
 $pconfig['unityplugin'] = isset($config['ipsec']['unityplugin']);
 $pconfig['compression'] = isset($config['ipsec']['compression']);
+$pconfig['enableinterfacesuse'] = isset($config['ipsec']['enableinterfacesuse']);
 $pconfig['acceptunencryptedmainmode'] = isset($config['ipsec']['acceptunencryptedmainmode']);
 $pconfig['maxmss_enable'] = isset($config['system']['maxmss_enable']);
 $pconfig['maxmss'] = $config['system']['maxmss'];
@@ -134,6 +135,15 @@ if ($_POST) {
 			$needsrestart = true;
 			unset($config['ipsec']['compression']);
 		}
+		
+		if($_POST['enableinterfacesuse'] == "yes") {
+			if (!isset($config['ipsec']['enableinterfacesuse']))
+				$needsrestart = true;
+			$config['ipsec']['enableinterfacesuse'] = true;
+		} elseif (isset($config['ipsec']['enableinterfacesuse'])) {
+			$needsrestart = true;
+			unset($config['ipsec']['enableinterfacesuse']);
+		}
 
 		if($_POST['unityplugin'] == "yes") {
 			if (!isset($config['ipsec']['unityplugin']))
@@ -295,6 +305,15 @@ function maxmss_checked(obj) {
 							<?=gettext("IPComp compression of content is proposed on the connection."); ?>
 						</td>
 					</tr>
+					<tr>
+						<td width="22%" valign="top" class="vncell"><?=gettext("Strict interface binding"); ?></td>
+						<td width="78%" class="vtable">
+							<input name="enableinterfacesuse" type="checkbox" id="enableinterfacesuse" value="yes" <?php if ($pconfig['enableinterfacesuse']) echo "checked=\"checked\""; ?> />
+							<strong><?=gettext("Enable strict interface binding"); ?></strong>
+							<br />
+							<?=gettext("Enable strongSwan's interfaces_use option to bind specific interfaces only. This option is known to break IPsec with dynamic IP interfaces. This is not recommended at this time."); ?>
+						</td>
+					</tr>
 					<tr>
 						<td width="22%" valign="top" class="vncell"><?=gettext("Unencrypted payloads in IKEv1 Main Mode"); ?></td>
 						<td width="78%" class="vtable">