Tunnel Mode
Tunnel mode is useful in a configuration that includes a firewall or other sort of security gateway that protects a trusted network from external networks
- Encryption occurs only between an external host and the security gateway or between two security gateways
- This setup relieves hosts on the internal network of the processing burden of encryption and simplifies the key distribution task by reducing the number of needed keys