[strongSwan] except certain protocols from IPsec encryption

[Nerijus Baliunas]

Hello,

>From 4.5.3 changelog:
The IKEv2 charon daemon allows one to define PASS and DROP shunt policies that, for example, prevent local traffic from going through IPsec connections or except certain protocols from IPsec encryption.

I want to except GRE protocol from IPsec encryption, but want it to go via ipsec tunnel
(only unencrypted). Is it possible?

Regards,
Nerijus