diff --git a/package/strongswan/Config.in b/package/strongswan/Config.in
index 919ce1f5bc..f2e597e016 100644
--- a/package/strongswan/Config.in
+++ b/package/strongswan/Config.in
@@ -195,6 +195,9 @@ config BR2_PACKAGE_STRONGSWAN_SQL
 	bool "Enable SQL database configuration backend"
 	depends on BR2_PACKAGE_SQLITE || BR2_PACKAGE_MYSQL
 
+config BR2_PACKAGE_STRONGSWAN_BYPASS_LAN
+	bool "Enable BYPASS-LAN plugin"
+
 endif
 
 config BR2_PACKAGE_STRONGSWAN_PKI
diff --git a/package/strongswan/strongswan.mk b/package/strongswan/strongswan.mk
index 95079aceb3..44c20f8414 100644
--- a/package/strongswan/strongswan.mk
+++ b/package/strongswan/strongswan.mk
@@ -57,6 +57,7 @@ STRONGSWAN_CONF_OPTS += \
 	--enable-eap-tnc=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_TNC),yes,no) \
 	--enable-eap-dynamic=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_DYNAMIC),yes,no) \
 	--enable-eap-radius=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_RADIUS),yes,no) \
+	--enable-bypass-lan=$(if $(BR2_PACKAGE_STRONGSWAN_BYPASS_LAN),yes,no) \
 	--with-ipseclibdir=/usr/lib \
 	--with-plugindir=/usr/lib/ipsec/plugins \
 	--with-imcvdir=/usr/lib/ipsec/imcvs \