Best way to do ipsec on Woody

[Kent Tong <kent@cpttm.org.mo>]

Hi,

I'd like to setup ipsec on Woody (stable) with kernel 2.4.18. 
I've read the doc in http://wiki.debian.net/?IPsec and would 
like to seek your input. Basically I have several options:
A) Install a newer 2.4 kernel (>= 2.4.21), ipsec-tools and racoon 
from www.backports.org.
B) Install a newer 2.6 kernel, ipsec-tools and racoon 
from www.backports.org.
C) Stick with the 2.4.18 kernel, get the freeswan kernel patch
and compile a custom kernel. Then install the freewan package.
D) Upgrade to testing (Sarge).

Which option is the easiest?

Thanks!