Just to be clear, a "tunnel" is a delivery mechanism that allows an encrypted packet that is encapsulated in IP to be delivered across a network. In the case we are talking about, we take an IP packet, encrypt it, and wrap it in IP to deliver it.
Why? If we encrypt the packet, we have very...