IPSec

conn a-b
        keyexchange=ikev2
        authby=psk
        left=1.2.3.4
        leftsubnet=a:b:c:0300::/56
        right=5.6.7.8
        rightsubnet=::/0
        type=tunnel
        auto=start

• http://blog.ololo.cc/ipsec