[ ifup = "$ACTION" -a wan = "$INTERFACE" ] && {
	en_ipsec=$(uci -c /etc/config/grocx/ get vtss_fw.@basic[0].enable_vpn)
	if [ $en_ipsec = "1" -a -s /etc/ipsec.d/grocx.conf ]; then 
		/etc/init.d/ipsec restart
	fi
}