Baiju, Tunnel-mode ESP does NOT provide the same security properties as AH. Wishing that it did and marketing it as if it did, doesn't make it true. Folks need to understand what security properties they desire, then use the appropriate mechanism(s) to provide those properties. Ran