diff --git a/src/main/webapp/WEB-INF/include/form/ipInfo.jsp b/src/main/webapp/WEB-INF/include/form/ipInfo.jsp
index b343bf6a0..64b8d5be4 100644
--- a/src/main/webapp/WEB-INF/include/form/ipInfo.jsp
+++ b/src/main/webapp/WEB-INF/include/form/ipInfo.jsp
@@ -16,6 +16,32 @@
 	            <div for="ipType"></div>
 	        </div>
 	    </div>
+	    <c:if test="${specialProtocol!=null and specialProtocol eq 'ipsec'}">
+	    	<div class="col-md-6">
+		        <div class="form-group ">
+		            <label class="control-label col-md-3"><font color="red">*</font><spring:message code="protocol"/></label>
+		            <div class="col-md-6">
+		            	<select name="protocol" class="selectpicker show-tick form-control required">
+	               			<c:choose>
+	               				<c:when test="${specialProtocol!=null and specialProtocol eq 'ipsec'}">
+	               					<c:forEach items="${fns:getDictList('IPSEC_PROTOCOL')}" var="protocolC">
+										<option value="${protocolC.itemCode}" <c:if test="${_cfg.protocol==protocolC.itemCode || (_cfg.protocol==null && protocolC.itemCode==0)}">selected</c:if>><spring:message code="${protocolC.itemDesc}"/></option>
+			              			</c:forEach>
+	               				</c:when>
+	               				<c:otherwise>
+	               					<c:forEach items="${fns:getDictList('PROTOCOL')}" var="protocolC">
+										<option value="${protocolC.itemCode}" <c:if test="${_cfg.protocol==protocolC.itemCode || (_cfg.protocol==null && protocolC.itemCode==0)}">selected</c:if>><spring:message code="${protocolC.itemDesc}"/></option>
+			              			</c:forEach>
+	               				</c:otherwise>
+	               			</c:choose>
+		                   
+		                </select>
+		                <input type="hidden" name="protocolId" value="0">
+		            </div>
+		            <div for="protocol"></div>
+		        </div>
+		    </div>
+	    </c:if>
 	</div>
 	<div class="row">
 	    <div class="col-md-6">
@@ -107,35 +133,32 @@
 			<div class="row protocol">
 		</c:otherwise>
 	</c:choose>
-	    <div class="col-md-6">
-	        <div class="form-group ">
-	            <label class="control-label col-md-3"><font color="red">*</font><spring:message code="protocol"/></label>
-	            <div class="col-md-6">
-	            	<select name="protocol" class="selectpicker show-tick form-control required">
-	            		<c:forEach items="${fns:getDictList('SPECIAL_FUNCTION_ID')}" var="sfi">
-							<c:if test="${sfi.itemCode==_cfg.functionId and sfi.itemValue eq 'ipsec'}">
-							<c:set var="specialProtocol" value="${sfi.itemValue}"/>
-							</c:if>
-               			</c:forEach>
-               			<c:choose>
-               				<c:when test="${specialProtocol!=null and specialProtocol eq 'ipsec'}">
-               					<c:forEach items="${fns:getDictList('IPSEC_PROTOCOL')}" var="protocolC">
-									<option value="${protocolC.itemCode}" <c:if test="${_cfg.protocol==protocolC.itemCode || (_cfg.protocol==null && protocolC.itemCode==0)}">selected</c:if>><spring:message code="${protocolC.itemDesc}"/></option>
-		              			</c:forEach>
-               				</c:when>
-               				<c:otherwise>
-               					<c:forEach items="${fns:getDictList('PROTOCOL')}" var="protocolC">
-									<option value="${protocolC.itemCode}" <c:if test="${_cfg.protocol==protocolC.itemCode || (_cfg.protocol==null && protocolC.itemCode==0)}">selected</c:if>><spring:message code="${protocolC.itemDesc}"/></option>
-		              			</c:forEach>
-               				</c:otherwise>
-               			</c:choose>
-	                   
-	                </select>
-	                <input type="hidden" name="protocolId" value="0">
-	            </div>
-	            <div for="protocol"></div>
-	        </div>
-	    </div>
+		<c:choose>
+			<c:when test="${specialProtocol!=null and specialProtocol eq 'tunnel'}">
+				<c:forEach items="${fns:getDictList('TUNNEL_PROTOCOL')}" var="protocolC">
+					<c:if test="${protocolC.itemValue eq 'default'}">
+					<input type="hidden" name="protocol" value="${protocolC.itemCode}">
+					</c:if>
+ 			</c:forEach>
+			</c:when>
+			<c:when test="${specialProtocol!=null and specialProtocol eq 'ipsec'}"></c:when>
+			<c:otherwise>
+	    		<div class="col-md-6">
+			        <div class="form-group ">
+			            <label class="control-label col-md-3"><font color="red">*</font><spring:message code="protocol"/></label>
+			            <div class="col-md-6">
+		           				<select name="protocol" class="selectpicker show-tick form-control required">
+		           					<c:forEach items="${fns:getDictList('PROTOCOL')}" var="protocolC">
+										<option value="${protocolC.itemCode}" <c:if test="${_cfg.protocol==protocolC.itemCode || (_cfg.protocol==null && protocolC.itemCode==0)}">selected</c:if>><spring:message code="${protocolC.itemDesc}"/></option>
+		            				</c:forEach>
+		           				</select>
+			                <input type="hidden" name="protocolId" value="0">
+			            </div>
+			            <div for="protocol"></div>
+			        </div>
+	    		</div>
+	    	</c:otherwise>
+        </c:choose>
 	    <div class="col-md-6">
 	        <div class="form-group">
 	            <label class="control-label col-md-3"><font color="red">*</font><spring:message code="direction"/></label>
diff --git a/src/main/webapp/WEB-INF/views/cfg/iplist/form.jsp b/src/main/webapp/WEB-INF/views/cfg/iplist/form.jsp
index 01ceb91c8..c2e4f0196 100644
--- a/src/main/webapp/WEB-INF/views/cfg/iplist/form.jsp
+++ b/src/main/webapp/WEB-INF/views/cfg/iplist/form.jsp
@@ -120,7 +120,12 @@ $(function(){
 								   </div>
 								</div>
 							<!-- desc and action -->
-                           <%@include file="/WEB-INF/include/form/ipInfo.jsp" %>
+							<c:forEach items="${fns:getDictList('SPECIAL_FUNCTION_ID')}" var="sfi">
+								<c:if test="${sfi.itemCode==_cfg.functionId}">
+								<c:set var="specialProtocol" value="${sfi.itemValue}"/>
+								</c:if>
+               				</c:forEach>
+           			   		<%@include file="/WEB-INF/include/form/ipInfo.jsp" %>
                            <%@include file="/WEB-INF/include/form/areaInfo.jsp" %>
                             <%@include file="/WEB-INF/include/form/basicInfo.jsp" %>
                           </div>