Case no.1: internal traffic via IPsec tunnels