Tunnel Mode

• The Next Header field of the ESP header would be decimal 4 for IP-in-IP, indicating that the entire original IP packet is contained as the ?payload

• The resulting block is encapsulated with a new IP header whose destination address is the firewall

  • This forms the outer IP packet
  • The Next Header field for this IP packet is 50 for ESP

Previous slide

Next slide

Back to first slide

View graphic version