Transport and Tunnel Modes

Each IP packet can be encrypted or authenticated in two ways:

1. Transport Mode--Only the data part of the IP packet can be encrypted.

2. Tunnel Mode--The whole IP packet is protected.