11. IPSec packet IKE negotiation SA IKE SA IKE Ipsec negotiation SA SA Tunnel
12. Authentication Data (00ABCDEF) Authentication Data (00ABCDEF) IP Header + Data IP Header + Data Uses keyed-MAC Router Firewall AH IP HDR Data Authenticated AH Provides Data Authentication
13. IP Header IPSec Header(s) AH/ESP IP Data (Encrypted) Interoperable Authentication, Integrity and Encryption