
116 Part Two • IPv6 Protocols
GW IP hdr ext hdrs ext hdrsAH orig IP hdr TCP Data
IP datagram for tunneling to security gateway (GW)
orig IP hdr ext hdrs TCP Data
Original IP datagram
Figure 6–6: Adding an Authentication Header to an IP datagram in tunnel mode.
As originally defined, the Authentication Header consisted of 64 bits
of header, with the rest devoted to authentication data (see the fol-
lowing). Thus, the payload length field merely indicated the length
(in 32-bit words) of the authentication data. With the addition of the
Sequence Number field (see the following), this value now equals
the length of the authentication data plus the length of