Combining SAs

• SAs many combine into bundles in two ways:

  • Transport adjacency – applying more than one security protocol to the same IP packet without invoking tunneling; only one level of combination, no nesting
  • Iterated tunneling – application of mutltiple layers of security protocols effected through IP tunneling; multiple layers of nesting