Billion Electric Company BiGuard 50G user manual Ah/E

IP

AH/E

IP

TC Dat

Transport Mode

-This mode is used to provide data security between two networks. It provides protection for the entire IP packet and is sent by adding an outer IP header corresponding to the two tunnel end-points. Since tunnel mode hides the original IP header, it provides security of the networks with private IP address space.

IP

AH/E

TC Dat

E.2.3 Tunnel Mode AH

AH is typically applied to a data packet in the following manner:

Original Packet

IP Header

TCP

Data

Packet with IPSec Authentication Header

New IP Header	AH	Org IP Header	TCP
		Authenticated

Data

175