Openswan is your friend. I have it running (under OpenSUSE) and it is quite easy. I tend to favor IPsec over SSL as I don't like to have openssl as a dependancy.
-geoff
------------------------------ Geoff Galitz Blankenheim, DE http://www.galitz.org