Security Model with Tunnel-mode IPsec for NAT Domains

This document describes a security model by which tunnel-mode IPsec security can be architected on NAT devices. This memo provides information for the Internet community.