diff --git a/strongswan.spec b/strongswan.spec
index a227260..c7ad454 100644
--- a/strongswan.spec
+++ b/strongswan.spec
@@ -446,7 +446,9 @@ echo 'd %{_rundir}/%{name} 0770 root root' > %{buildroot}%{_tmpfilesdir}/%{name}
 #
 install -c -m750 _fipscheck %{buildroot}/%{_libexecdir}/ipsec/
 install -c -m644 %{_sourcedir}/fips-enforce.conf \
-                 %{buildroot}/%{strongswan_configs}/charon/zzz_fips-enforce.conf
+                 %{buildroot}/%{strongswan_configs}/charon/zzz_fips-enforce.conf                 
+# disable bypass-lan plugin by default
+sed -i 's/\(load[ ]*=[ ]*\)yes/\1no/g' %{buildroot}/%{strongswan_configs}/charon/bypass-lan.conf
 # create fips hmac hashes _after_ install post run
 %{expand:%%global __os_install_post {%__os_install_post
 	for f in %{buildroot}/%{strongswan_libdir}/lib*.so.*.*.* \