diff --git a/tasks/ipsecphase1.yml b/tasks/ipsecphase1.yml
index 55c78ba..e3b4e29 100644
--- a/tasks/ipsecphase1.yml
+++ b/tasks/ipsecphase1.yml
@@ -12,6 +12,7 @@
     - "{{ ipsecphasevar.phase1 | default({}) }}"
   when:
     - not item.key == 'encryption-algorithm'
+    - not (item.key == 'disabled' and item.value|int != 1)
 
 - name: "IPSec ike phase1 encryption-algorithm for ikeid {{ ikeid }}"
   delegate_to: localhost
diff --git a/test/ipsec-testdisable-expect.xml b/test/ipsec-testdisable-expect.xml
index 7bb8b50..a346f26 100644
--- a/test/ipsec-testdisable-expect.xml
+++ b/test/ipsec-testdisable-expect.xml
@@ -34,6 +34,7 @@
         <name>aes</name>
         <keylen>256</keylen>
       </encryption-algorithm>
+      <disabled>1</disabled>
     </phase1>
     <phase2>
       <ikeid>1</ikeid>
diff --git a/test/ipsec-testdisable.yml b/test/ipsec-testdisable.yml
index fd9f5d9..edc6142 100644
--- a/test/ipsec-testdisable.yml
+++ b/test/ipsec-testdisable.yml
@@ -7,6 +7,7 @@ opn_ipsec:
   ikeids:  # key is the ikeid
     1:
       phase1:
+        disabled: 1
         descr: s2s test
         iketype: ikev1
         interface: wan