traffic
Click on the red underlined text to get to the source
... security gateway bearing the original routable IP address.
All the traffic between the remote host and the intranet will be
...
... IPsec tunnel
mode SA established to protect initial DHCPv4 traffic between the
security gateway and the remote host ...
... SA MUST only be
used for DHCP traffic. The details of how this SA is set up are
described in Section 4.1.
...
... remote host and
the DHCPv4 server. The traffic is protected between the remote
host and the security gateway using the DHCP ...
... security gateway MAY
continue to use the same SA for all subsequent traffic by adding
temporary SPD selectors in the same manner as is provided for name
...
... intranet using an IPsec tunnel. All the IP traffic
(including future DHCPv4 messages) between the remote host ...
... remote host to forward all
Internet-bound traffic through the tunnel. While this adds overhead
...
... security in return for this, in that the corporate
security gateway may now filter traffic as it would if the remote
host were physically located on the corporate network.
...