Joe Touch wrote: >> Tunneling, encapsulation, VPNs, IP-in-IP are all network activities. > > Tunneling is an end system activity. > > Nodes that encap or decap are acting as sources or sinks, not relays. A problem is that relays (firewalls) are involved in decap. Masataka Ohta