History: in the past, pfSense used "raccoon" as its IPSec daemon, and I believe it was not capable of forming this sort of tunnel. They just (version 2.2, released a few days ago) switched to ...