Many thanks! I successfully apply this patch http://people.freebsd.org/~vanhu/NAT-T/patch-natt-7.2-2009-05-12.diff on FreeBSD 7.3-RELEASE and build custom kernel with IPSec NAT-T support. I use ipsec-tools 0.7.3 and it works coorectly. Thanks again.