Add to your kernel config file these lines:
option	IPSEC
pseudo-device	enc	4			# encapsulating interface

and recompile the kernel (config, make depend, make).
