Apparently it is possible with Firebox 2 using ipsec manual: http://lists.freeswan.org/pipermail/users/2001-June/000566.html