Maybe this is of interest for someone. lwn.net point to a short guide to ipsec: http://lwn.net/Articles/149292/ or directly: http://www.unixwiz.net/techtips/iguide-ipsec.html