Case no.1: internal traffic via IPSec tunnels