--- vpn.inc.orig	2017-11-17 10:35:01.000000000 +0000
+++ vpn.inc	2018-02-05 23:32:50.306744000 +0000
@@ -1236,6 +1236,8 @@
 
 					if ($ph2ent['protocol'] == 'esp') {
 						if (is_array($ph2ent['encryption-algorithm-option'])) {
+							# resetting ealgoESPsp2arr prevents the esp option from being added to the existing entry for each phase 2 section
+							$ealgoESPsp2arr = array();
 							foreach ($ph2ent['encryption-algorithm-option'] as $ealg) {
 								$ealg_id = $ealg['name'];
 								$ealg_kl = $ealg['keylen'];