IPsec forever remains in the realm of things that aren’t terribly difficult to setup if you know what you’re doing, but nigh impossible if you’re starting from scratch and trying to wade through hundreds of pages of possible configuration options. Here’s one example config to help.