configure IP address on IPSec interfaces

Currently, not address is assigned to ipsec interfaces, i.e. traffic is routed but the VPN endpoint itself cannot send through the tunnel. Assign highest address in routed net to interface, allow override from ipsec config.