Tunnel Mode
When security is required in parts of the communication, e.g. VPNs, intranets
IPSec encapsulates the IP packet with IPSec headers and adds an outer IP header, usually created by a router
Router Implementation
- IPSec is integrated with the router software
- Bump in the Wire (BITW): in a device attached to the physical interface of the router