diff --git a/etc/inc/upgrade_config.inc b/etc/inc/upgrade_config.inc
index cd5fd00df1..377e458742 100644
--- a/etc/inc/upgrade_config.inc
+++ b/etc/inc/upgrade_config.inc
@@ -3555,6 +3555,9 @@ function upgrade_115_to_116() {
 function upgrade_116_to_117() {
 	global $config;
 
+	if (is_array($config['ipsec']))
+		$config['ipsec']['shuntlaninterfaces'] = true;
+
 	if (!isset($config['ipsec']['client']) ||
 	    !isset($config['ipsec']['client']['dns_split']) ||
 	    empty($config['ipsec']['client']['dns_split'])) {
@@ -3564,7 +3567,6 @@ function upgrade_116_to_117() {
 	$config['ipsec']['client']['dns_split'] =
 		preg_replace('/\s*,\s*/', ' ', trim($config['ipsec']['client']['dns_split']));
 
-	$config['ipsec']['shuntlaninterfaces'] = true;
 }
 
 ?>