Tunnel Mode SA
Click on the red underlined text to get to the source
... tunnel is required, the remote host establishes a
tunnel mode SA to the security gateway in a quick mode exchange.
...
... DHCPDISCOVER or DHCPREQUEST) is then tunneled to the security
gateway using the tunnel mode SA. Note that since the DHCPDISCOVER
packet has a broadcast ...
