If the underlying network layer does not support IPSec, you can use the interim authentication header (AH) scheme to provide security on the connection between the VPG and the PGC. The interim AH scheme defines an AH header with the H.248 protocol header. To use the interim AH scheme, configure the a security algorithm for the interim AH scheme in the VPG configuration.