A method for efficient transport of packets between a mobile station and a secure gateway over a wireless local area network for accessing home services, comprising: a. establishing a first encryption security association which is a secure IP tunnel from the secure gateway to the mobile station for transporting first-type packets from the secure gateway to the mobile station, and establishing a second encryption security association which is a secure IP tunnel from the mobile station to the secure gateway for transporting first-type packets from the mobile station to the secure gateway; b. establishing a first null-encryption security association which is a secure IP tunnel from the secure gateway to the mobile station for transporting second-type packets from the secure gateway to the mobile station, and establishing a second null-encryption security association which is a secure IP tunnel from the mobile station to the secure gateway for transporting second-type packets from the mobile station to the secure gateway; and c. selecting second-type packets for transport using the second null-encryption security association based on a traffic selector which is a destination IP address and port number; d. wherein the second-type packets selected for transport using the second null-encryption security association are previously encrypted voice-over-IP packets. a. establishing a first encryption security association which is a secure IP tunnel from the secure gateway to the mobile station for transporting first-type packets from the secure gateway to the mobile station, and establishing a second encryption security association which is a secure IP tunnel from the mobile station to the secure gateway for transporting first-type packets from the mobile station to the secure gateway; a first encryption security association which is a secure IP tunnel from the secure gateway to the mobile station for transporting first-type packets from the secure gateway to the mobile station, and establishing a second encryption security association which is a secure IP tunnel from the mobile station to the secure gateway for transporting first-type packets from the mobile station to the secure gateway; b. establishing a first null-encryption security association which is a secure IP tunnel from the secure gateway to the mobile station for transporting second-type packets from the secure gateway to the mobile station, and establishing a second null-encryption security association which is a secure IP tunnel from the mobile station to the secure gateway for transporting second-type packets from the mobile station to the secure gateway; and a first null-encryption security association which is a secure IP tunnel from the secure gateway to the mobile station for transporting second-type packets from the secure gateway to the mobile station, and establishing a second null-encryption security association which is a secure IP tunnel from the mobile station to the secure gateway for transporting second-type packets from the mobile station to the secure gateway; c. selecting second-type packets for transport using the second null-encryption security association based on a traffic selector which is a destination IP address and port number; d. wherein the second-type packets selected for transport using the second null-encryption security association are previously encrypted voice-over-IP packets.