The IPsec feature implementation is available only in software. Hardware implementation is not available. Only control packets to and from the CPU are subject to IPsec. IPsec implements IPsec policies in the software on the control path.
The device does not support address ranges facility for an IPsec policy.
No fast-path support exists for IPsec.