Which IPsec mode encapsulates the entire IP packet?

The correct answer is A. tunnel. In IPsec tunnel mode, the entire original IP packet, including the IP header and payload, is encapsulated and protected by a new IPsec header. This new packet is then transmitted between the IPsec endpoints (typically security gateways). Tunnel mode is typically used in site-to-s

Submitted by mateo_ar· Mar 5, 2026

Question

Which IPsec mode encapsulates the entire IP packet?

Options

Atunnel
BQ-in-Q
CSSL VPN
Dtransport

How the community answered

(34 responses)

A
91% (31)
B
3% (1)
D
6% (2)

Explanation

In IPsec tunnel mode, the entire original IP packet, including the IP header and payload, is encapsulated and protected by a new IPsec header. This new packet is then transmitted between the IPsec endpoints (typically security gateways). Tunnel mode is typically used in site-to-site

Topics

#IPsec modes#VPN encapsulation

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice