which two functions are required for ipsec operation