Patent ID: 8289970

Claim:
A computer implemented method of negotiating an encapsulation of packets that are securely sent between an initiator and a responder, the method comprising: sending a first message from the initiator to the responder with a plurality of proposals for encapsulating packets sent on a connection established between the initiator and the responder, wherein a first one of the plurality of proposals comprises a parameter for allowing packets to be sent on the connection without encapsulation; receiving a second message from the responder indicating a selection of the at least one proposal; sending a first packet on a connection established between the initiator and the responder, wherein the first packet is encapsulated; and after sending the first packet, sending a plurality of packets on the connection established between the initiator and the responder, wherein the plurality of packets are not encapsulated; receiving an Internet Control Message Protocol (ICMP) message from the responder; encapsulating and sending one of the plurality of packets to the responder in response to receiving the ICMP packet; and resending the one of the plurality of packets without encapsulating to the responder.