You can always set up the routers in no-security mode and then make the clients use IPSec http://en.wikipedia.org/wiki/Ipsec
If you connect to the internet via a software router it is even possible to disallow any connections out-of-the-house without proper authentication.