Which way did you follow to setup an IPSec tunnel between GW and Client's enclave

[markueni]

Hi,

I have read your paper "SafeBrick" and I was wondering how did you manage to setup the IPSEC between GW and the client enclave and putting IPSec endpoint inside enclave.
In my project I am using StrongSwan to setup an IPSec but the endpoint is in IP layer so I am not able to setup the endpoint within enclave without extensive changes in their source code.
What I am asking is if that is any easy way to setup an IPSEC and decrypt the packet from within enclave?