tunnels

used in most of MBone

simultaneous upgrades impossible

virtual overlay on existing network

encapsulate new-style packets in old-style packets