I tried to set up a tunnel with AH only. I set "auth=ah" and found the tunnel was protected by both AH and ESP. I am wondering if I can set up a tunnel without ESP. Also, is AH being discarded? Why? Thank you for any input. Xiuduan