Recommendation - I've stumbled across this page @ <http://unixwiz.net/techtips/iguide-ipsec.html>; which is one of the best 'lite' coverages of IPSec I've found yet. And readable documentation of IPsec (IMO) is pretty scarce.