Tunnel Mode
The outer packet is routed to the destination firewall.
Each intermediate router needs to examine and process the outer IP header plus any outer IP extension headers but does not need to examine the ciphertext.
Previous slide
Next slide
Back to first slide
View graphic version