Every router can do this. If you have to have process-switching configured on your router interface then this is a bug. There were quite a few bugs with this in older code, but these should have all been resolved. The problem does reappear in later codes every now and then with certain configurations, but basically upgrading to the latest mainline release should resolve all these problems.
Any router will work with fast or CEF switching and IPSec.
