There is tun/tap available as a binary package.

Ontop of tun/tap you can run OpenVPN oder OpenConnect to make up your favourite VPN.

See the testing repositories "localhosts11", "localhosts12", "localhostoi151a8" and "localhostomnis" to install the binary packages.

Details on how to use the repositories are here: http://sfe.opencsw.org/prelim-sfe-startpage

If you can provide example configurations and install instructions to our users, we wold be happy to include them on the wiki or on this blog.