diff --git a/client/server_scripts/ipsec/template.conf b/client/server_scripts/ipsec/template.conf
index d8cf6b1f..eb9291f9 100644
--- a/client/server_scripts/ipsec/template.conf
+++ b/client/server_scripts/ipsec/template.conf
@@ -21,6 +21,7 @@ conn ikev2-vpn
     rightsendcert=never
     eap_identity=%identity
     encapsulation=yes 
+    pfs=yes 
     ike=aes256-sha256-modp2048,aes256-sha1-modp1024,3des-sha1-modp1024
     esp=aes256-sha256,aes256-sha1,3des-sha1