do I have to compile a new kernel? or just add options somehow?

[firmdog at gmail.com]

I am having difficulty understanding what is compiled into the GENERIC
kernel.

I need to enable "device crypto" with IPSEC and IPSEC_NAT_T options.

Can I just configure the GENERIC kernel in a config file? Or do I have to
compile a totally new kernel?