IPsec in 4 minutes


Firewall rules:

ext_if="vr1"
int_if="vr0"

set skip on { lo $int_if enc0}
nat on $ext_if from !($ext_if) -> ($ext_if:0)

block in
pass quick on $ext_if from 5.6.7.8
pass out keep state