ESPER limitations
- No IPv6 extension headers support
- No IPv4 fragmentation support
- Security policies are not applied to incoming traffic. All
decrypted ESPs will be forwarded further. Use firewall instead
- Security policies for outgoing traffic allows either all
IP-traffic passing, or only TCP, UDP, ICMPv6 protocols, possibly
with port number for TCP/UDP