diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index bb399cf0a3..2e59743c53 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -714,7 +714,7 @@ EOD;
 							$left_spec = "%any";
 						} else {
 							$tmpsubnet = ipsec_get_phase1_src($ph1ent);
-							if ($leftsubnet_spec[$tmpsubnet])
+							if (empty($leftsubnet_spec[$tmpsubnet]))
 								$leftsubnet_spec[$tmpsubnet] = $tmpsubnet;
 						}