diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index 688e9ca9bd..8e73927fd0 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -727,7 +727,7 @@ EOD;
 					$ipsecconf .= <<<EOD
 
 conn bypasslan
-	leftsubnet = {$lanip}/32
+	leftsubnet = {$lansa}/{$lansn}
 	rightsubnet = {$lansa}/{$lansn}
 	authby = never
 	type = passthrough