The example in Figure 2-1 shows the Hong Kong segment of the network. A remotely administered Screen, hk-screen, is set up in routing mode with two interfaces (configured with IP addresses on separate subnets). In this example, traffic between the Screen and the Administration Station is encrypted using SKIP. You can find information about using IKE for encryption in Chapter 5, Creating a VPN and in the SunScreen 3.2 Administrators Overview.