Hi, > In kernel_netlink_ipsec.c add_policy methed, the code checks if mode != > MODE_TRANSPORT to insert to route. Yes. Why do you need an additional route in transport mode? There are usually no new addresses or routes involved, transport mode just protects the traffic between two hosts that already have a route. Regards Martin