Basic Combinations

• IPSec architecture lists four examples that must be supported in an implementation

• Figures represent the logical and physical connectivity

• Each SA can be either AH or ESP

• Host-to-host SAs are either transport or tunnel, otherwise it must be tunnel mode