diff --git a/docs/configexamples/ipsec-cisco-policy-based.rst b/docs/configexamples/ipsec-cisco-policy-based.rst
index e3939edf..787c1140 100644
--- a/docs/configexamples/ipsec-cisco-policy-based.rst
+++ b/docs/configexamples/ipsec-cisco-policy-based.rst
@@ -103,10 +103,10 @@ VyOS
  set vpn ipsec authentication psk AUTH-PSK id '10.0.2.2'
  set vpn ipsec authentication psk AUTH-PSK secret 'dGVzdA=='
  set vpn ipsec authentication psk AUTH-PSK secret-type 'base64'
- set vpn ipsec esp-group ESP-GRPOUP lifetime '3600'
- set vpn ipsec esp-group ESP-GRPOUP pfs 'disable'
- set vpn ipsec esp-group ESP-GRPOUP proposal 10 encryption 'aes256'
- set vpn ipsec esp-group ESP-GRPOUP proposal 10 hash 'sha256'
+ set vpn ipsec esp-group ESP-GROUP lifetime '3600'
+ set vpn ipsec esp-group ESP-GROUP pfs 'disable'
+ set vpn ipsec esp-group ESP-GROUP proposal 10 encryption 'aes256'
+ set vpn ipsec esp-group ESP-GROUP proposal 10 hash 'sha256'
  set vpn ipsec ike-group IKE-GROUP close-action 'start'
  set vpn ipsec ike-group IKE-GROUP dead-peer-detection action 'restart'
  set vpn ipsec ike-group IKE-GROUP dead-peer-detection interval '10'
@@ -119,7 +119,7 @@ VyOS
  set vpn ipsec site-to-site peer CISCO authentication mode 'pre-shared-secret'
  set vpn ipsec site-to-site peer CISCO authentication remote-id '10.0.2.2'
  set vpn ipsec site-to-site peer CISCO connection-type 'initiate'
- set vpn ipsec site-to-site peer CISCO default-esp-group 'ESP-GRPOUP'
+ set vpn ipsec site-to-site peer CISCO default-esp-group 'ESP-GROUP'
  set vpn ipsec site-to-site peer CISCO ike-group 'IKE-GROUP'
  set vpn ipsec site-to-site peer CISCO local-address '10.0.1.2'
  set vpn ipsec site-to-site peer CISCO remote-address '10.0.2.2'
diff --git a/docs/configexamples/ipsec-cisco-route-based.rst b/docs/configexamples/ipsec-cisco-route-based.rst
index f7b0ddbe..f7c3cb08 100644
--- a/docs/configexamples/ipsec-cisco-route-based.rst
+++ b/docs/configexamples/ipsec-cisco-route-based.rst
@@ -108,10 +108,10 @@ VyOS
  set vpn ipsec authentication psk AUTH-PSK id '10.0.2.2'
  set vpn ipsec authentication psk AUTH-PSK secret 'dGVzdA=='
  set vpn ipsec authentication psk AUTH-PSK secret-type 'base64'
- set vpn ipsec esp-group ESP-GRPOUP lifetime '3600'
- set vpn ipsec esp-group ESP-GRPOUP pfs 'disable'
- set vpn ipsec esp-group ESP-GRPOUP proposal 10 encryption 'aes256'
- set vpn ipsec esp-group ESP-GRPOUP proposal 10 hash 'sha256'
+ set vpn ipsec esp-group ESP-GROUP lifetime '3600'
+ set vpn ipsec esp-group ESP-GROUP pfs 'disable'
+ set vpn ipsec esp-group ESP-GROUP proposal 10 encryption 'aes256'
+ set vpn ipsec esp-group ESP-GROUP proposal 10 hash 'sha256'
  set vpn ipsec ike-group IKE-GROUP close-action 'start'
  set vpn ipsec ike-group IKE-GROUP dead-peer-detection action 'restart'
  set vpn ipsec ike-group IKE-GROUP dead-peer-detection interval '10'
@@ -126,7 +126,7 @@ VyOS
  set vpn ipsec site-to-site peer CISCO authentication mode 'pre-shared-secret'
  set vpn ipsec site-to-site peer CISCO authentication remote-id '10.0.2.2'
  set vpn ipsec site-to-site peer CISCO connection-type 'initiate'
- set vpn ipsec site-to-site peer CISCO default-esp-group 'ESP-GRPOUP'
+ set vpn ipsec site-to-site peer CISCO default-esp-group 'ESP-GROUP'
  set vpn ipsec site-to-site peer CISCO ike-group 'IKE-GROUP'
  set vpn ipsec site-to-site peer CISCO local-address '10.0.1.2'
  set vpn ipsec site-to-site peer CISCO remote-address '10.0.2.2'
diff --git a/docs/configexamples/ipsec-pa-route-based.rst b/docs/configexamples/ipsec-pa-route-based.rst
index e9b1ce25..b6f6f3a7 100644
--- a/docs/configexamples/ipsec-pa-route-based.rst
+++ b/docs/configexamples/ipsec-pa-route-based.rst
@@ -107,10 +107,10 @@ VyOS
  set vpn ipsec authentication psk AUTH-PSK id '10.0.2.2'
  set vpn ipsec authentication psk AUTH-PSK secret 'dGVzdA=='
  set vpn ipsec authentication psk AUTH-PSK secret-type 'base64'
- set vpn ipsec esp-group ESP-GRPOUP lifetime '3600'
- set vpn ipsec esp-group ESP-GRPOUP pfs 'disable'
- set vpn ipsec esp-group ESP-GRPOUP proposal 10 encryption 'aes256'
- set vpn ipsec esp-group ESP-GRPOUP proposal 10 hash 'sha256'
+ set vpn ipsec esp-group ESP-GROUP lifetime '3600'
+ set vpn ipsec esp-group ESP-GROUP pfs 'disable'
+ set vpn ipsec esp-group ESP-GROUP proposal 10 encryption 'aes256'
+ set vpn ipsec esp-group ESP-GROUP proposal 10 hash 'sha256'
  set vpn ipsec ike-group IKE-GROUP close-action 'start'
  set vpn ipsec ike-group IKE-GROUP dead-peer-detection action 'restart'
  set vpn ipsec ike-group IKE-GROUP dead-peer-detection interval '10'
@@ -125,7 +125,7 @@ VyOS
  set vpn ipsec site-to-site peer CISCO authentication mode 'pre-shared-secret'
  set vpn ipsec site-to-site peer CISCO authentication remote-id '10.0.2.2'
  set vpn ipsec site-to-site peer CISCO connection-type 'initiate'
- set vpn ipsec site-to-site peer CISCO default-esp-group 'ESP-GRPOUP'
+ set vpn ipsec site-to-site peer CISCO default-esp-group 'ESP-GROUP'
  set vpn ipsec site-to-site peer CISCO ike-group 'IKE-GROUP'
  set vpn ipsec site-to-site peer CISCO local-address '10.0.1.2'
  set vpn ipsec site-to-site peer CISCO remote-address '10.0.2.2'