July 2018
Intermediate to advanced
152 pages
3h 15m
English
Content preview from Network Security with pfSense
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Tunnel mode
Under the tunnel IPsec mode, the entire IP packet is encrypted and authenticated. This encrypted IP packet is then encapsulated into a new IP packet with a new IP header. Basically, it encrypts the entire IP traffic before the transfer of packets.
IPsec tunnel mode supports NAT traversal, and it is the default mode.
With tunnel mode, the entire original IP packet is protected by IPsec. This means that the IPsec wraps the original packet, encrypts it, adds a new IP header, and sends it to the other side of the VPN tunnel-IPsec peer.