Under the covers, IPsec has two modes of operation: transport and tunnel. In transport mode, only the payload is encrypted; the header is untouched. The source and destination hosts perform whatever ...