Add ipsec support.
Document NAT and IPSec options.