Well, I dumped FC4 on my home firewall. The problems I was having with IPSec were due to kame/racoon/ipsec-tools.

IKE is the devil.

I'm now running Endian Firewall, which uses OpenSwan (Pluto, et al). Literally minutes of work to get three VPN tunnels up and working!