diff --git a/Shorewall2/firewall b/Shorewall2/firewall
index 0436add3b..c10db462a 100755
--- a/Shorewall2/firewall
+++ b/Shorewall2/firewall
@@ -1644,7 +1644,7 @@ setup_ipsec() {
 
 	opts=$(separate_list $2)
 
-	for option in $options; do
+	for option in $opts; do
 	    case $option in
 		reqid=*)
 		    newoptions="$newoptions --reqid ${option#*=}"