Hi @AClealand,Cond
i recommend that you take into account that you can integrate IPsec Framework to protect each layer: ocnfidentiality, integrity and authentication.
Security and Encryption Overview
Configuration example
I hope it is very useful, take care.
Regards.