Alex, The purpose of IPsec is to offer end-to-end protection, so applying IPsec on a per-hop basis is feasible, but findamentally counter to the underlying motivation for these protocols, since the begining of this work (too) many years ago. Steve