SUSE Linux 10.0 includes openswan 2.4 and kernel level IPsec with NAT Traversal support.
Older versions:
SuSE kernels already contain IPsec support, either through 26sec or FreeS/WAN. But SuSE employee Kurt Garloff has made source and binary RPMs for several versions of SuSE. They contain more IPsec related patches than SuSE's official kernels.
