--- zzzz-none-000/linux-2.6.28.10/net/ipv4/xfrm4_mode_tunnel.c	2009-05-02 18:54:43.000000000 +0000
+++ fusiv-7390-686/linux-2.6.28.10/net/ipv4/xfrm4_mode_tunnel.c	2012-02-14 14:37:49.000000000 +0000
@@ -32,6 +32,12 @@
 	struct iphdr *top_iph;
 	int flags;
 
+#if CONFIG_IPSEC_AP_SUPPORT
+	/* The ESP processing will be done at security AP. Therefore nothing
+	   to do here. */
+	if(skb->apFlowData.encap_protocol == PROCESS_ESP_ENCAP)
+		return 0; 
+#endif
 	skb_set_network_header(skb, -x->props.header_len);
 	skb->mac_header = skb->network_header +
 			  offsetof(struct iphdr, protocol);