diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index f769f08418..7c59d47c99 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -270,10 +270,15 @@ function vpn_ipsec_configure($ipchg = false) {
 
 				}
 				$interface_ip = $sasyncd['ip'];
+				$interface_ips = split("\n", $interface_ip);
 				if($interface_ip <> "") {
+					foreach($interface_ips as $intip) {
+						if($intip) 
+							$racoon_ips .= "isakmp {$intip} [500];\n";
+					}
 					$racoonconf .= <<<EOD
 listen {
-	isakmp {$interface_ip} [500];
+	{$racoon_ips}
 	{$natt}
 }
 
diff --git a/usr/local/pkg/sasyncd.xml b/usr/local/pkg/sasyncd.xml
index 94d3fe44eb..61906d3ee7 100644
--- a/usr/local/pkg/sasyncd.xml
+++ b/usr/local/pkg/sasyncd.xml
@@ -54,7 +54,9 @@
 			<fielddescr>Failover IP</fielddescr>
 			<fieldname>ip</fieldname>
 			<description>Enter the IP address you would like to use for failover.  HINT:  You normally want to use a public CARP ip.</description>
-			<type>input</type>
+			<type>textarea</type>
+			<rows>3</rows>
+			<cols>20</cols><type>input</type>
 		</field>
 	</fields>
 	<custom_add_php_command>