Passive mode tunneling support

Allows you to perform IPsec tunneling of malformed packets bypassing the usual active IP checks, TTL checks, and fragmentation. You can enable this feature using the set security ipsec vpn vpn-name passive-mode-tunneling configuration statement.