diff --git a/data/templates/ipsec/ios_profile.j2 b/data/templates/ipsec/ios_profile.j2
index 966fad4339..eaf00018be 100644
--- a/data/templates/ipsec/ios_profile.j2
+++ b/data/templates/ipsec/ios_profile.j2
@@ -55,7 +55,7 @@
AuthenticationMethod
Certificate
-{% if authentication.client_mode.startswith("eap") %}
+{% if authentication.client_mode is vyos_defined and authentication.client_mode.startswith("eap") %}
ExtendedAuthEnabled
1