The tunnel mode provides protection to the whole IP packet, that is encapsulate the whole IP packet (including the header and payload), and transport it as a new IP packet payload.

• 隧道模式提供对所有IP包的保护,即将整个IP包(含包头和载荷)封装,作为新的IP包的载荷进行传送。