Can IPSec ESP be nested in another ESP?

Son Phan <[email protected]> Tue, 28 Sep 2004 09:52:59 +0200 (CEST)
Newsgroups gmane.comp.security.vpn
Message-ID <[email protected]>
Hello,

I understand that AH & ESP mode can be applied together for the same 
IP packet.

However I don't know whether two ESP can be nested. The case is as 
below:

PC-------------------------------VPN GW-------------Application Server (AS)
<<------ESP tunnel mode----->>
<<-------------ESP transport mode ------------------->>

PC has remote access to some closed domain using via VPN GW. ESP 
tunnel mode is used here.
One of the application running on this PC want to use a service provided 
by an AS within this closed domain. However this service mandates the 
client to use ESP transmode mode to contact it.

Can this scenario works?
Any extra requirement toward the IPSec implementation on PC?

Thanks, Son