Could you add IPSEC support in kernel and setkey tool (ipsec-tools) in rootfs ?
I would also like to add my wish for this feature.
I've implemented this here. You'll have to use your own ipsec-tools or strongswan optware package. (I recommend Entware — it works.)