Yes, you can. First download the cryptographic image for the MSFC from the software center. Image names look like "c6sup12-jk2" for example.
Once you load the crypto images on both MSFCs, then you can configure
IPSec policies just like in a regular IOS router and then apply the crypto map to the VLAN interfaces. That's all to it.
hope this helps,
Vijay
