diff --git a/src/etc/inc/ipsec.inc b/src/etc/inc/ipsec.inc
index f8a16212b6..2b758077bc 100644
--- a/src/etc/inc/ipsec.inc
+++ b/src/etc/inc/ipsec.inc
@@ -1558,7 +1558,11 @@ function ipsec_setup_pools() {
 		$v4pool['addrs'] = "{$a_client['pool_address']}/{$a_client['pool_netbits']}";
 		if (!empty($net_list4)) {
 			$v4pool['subnet'] = implode(",", $net_list4);
-			$v4pool['split_include'] = implode(",", $net_list4);
+			/* Do not include 0.0.0.0/0 in split_include, it is not compatible. */
+			$net_list4 = array_diff($net_list4, array('0.0.0.0/0'));
+			if (!empty($net_list4)) {
+				$v4pool['split_include'] = implode(",", $net_list4);
+			}
 			unset($net_list4);
 		}
 	}
@@ -1568,7 +1572,11 @@ function ipsec_setup_pools() {
 		$v6pool['addrs'] = "{$a_client['pool_address_v6']}/{$a_client['pool_netbits_v6']}";
 		if (!empty($net_list6)) {
 			$v6pool['subnet'] = implode(",", $net_list6);
-			$v6pool['split_include'] = implode(",", $net_list6);
+			/* Do not include ::/0 in split_include, it is not compatible. */
+			$net_list6 = array_diff($net_list6, array('::/0'));
+			if (!empty($net_list6)) {
+				$v6pool['split_include'] = implode(",", $net_list6);
+			}
 			unset($net_list6);
 		}
 	}