H1-----SG1=====R1=====INTERNET=====Rn=====SG2-----H2
Where:
- Hn are hosts
 - SGn are Security Gateways
 - Rn are routers
 - ----- is a non-IPSec connection over a trusted link
 - ===== is an IPSec connection over an untrusted link
 
H1 and H2 do not necessarily know about the internet and vice versa.
Last modified by
Richard Guy Briggs
,
Thu Jan 24 11:08:22 EST 2002
.