diff --git a/templates/ipsec-vip-tunnels.conf.j2 b/templates/ipsec-vip-tunnels.conf.j2
index bb908e6..efe74d8 100644
--- a/templates/ipsec-vip-tunnels.conf.j2
+++ b/templates/ipsec-vip-tunnels.conf.j2
@@ -13,6 +13,7 @@ conn overcloud-{{ current_vip.name }}-vip-tunnel
     dpdtimeout=15
     phase2alg={{ ipsec_algorithm }}
     failureshunt=drop
+    ikev2=insist
 
 {% endif %}
 
@@ -28,3 +29,4 @@ conn overcloud-{{ current_vip.name }}-node-to-vip-tunnel
     dpdtimeout=15
     phase2alg={{ ipsec_algorithm }}
     failureshunt=drop
+    ikev2=insist