> >As far as I understand RFC 2401 says that only one SP should be applied >to the packet. Nested tunnels are implemented using nested SAs not SPs. > >Am I wrong? > >-- >Alexey I agree with you. What is your opinion about my question ? Dong Xiaohu