cd /usr/src/sys/i386/conf
cp GENERIC NG_IPSEC
ident NG_IPSECcd /usr/src
options IPSEC
options IPSEC_NAT_T
device crypto
make -j4 buildkernel KERNCONF=NG_IPSEC
make installkernel KERNCONF=NG_IPSEC
shutdown -r now
cd /usr/ports/security/ipsec-tools/
make install clean