Eric, ESP requires the next protocol to be a transport protocol or IP, so carrying an Ethernet frame directky above ESP would not be valid. Steve