--- zzzz-none-000/linux-2.6.28.10/net/ipv4/esp4.c	2009-05-02 18:54:43.000000000 +0000
+++ fusiv-7390-686/linux-2.6.28.10/net/ipv4/esp4.c	2012-02-14 14:37:49.000000000 +0000
@@ -119,6 +119,13 @@
 	int alen;
 	int nfrags;
 
+#if CONFIG_IPSEC_AP_SUPPORT
+	/* The ESP processing will be done at security AP. Therefore nothing
+	   to do here. */
+	if(skb->apFlowData.encap_protocol == PROCESS_ESP_ENCAP)
+ 		return 0; 
+#endif
+
 	/* skb is pure payload to encrypt */
 
 	err = -ENOMEM;