IPsec2k is a C++ library that implements API for interacting with built-in Windows IPsec driver. It is self-contained and is capable of creating all policies one can create with MMC, IPsecPol or VPNtool.
Version 1.1 adds support for 'Dynamic' policies and fixes a bug in NFA object serialization.