Tunnel Mode

• Protection for the entire packet

• Add new outer IP packet with a new outer header

• AH or ESP fields are added to the IP packet and entire packet is treated as payload of the outer packet

• Packet travels through a tunnel from point to point in the network