IPSEC - W2k - Isn't that an error?

[mizzy]

Hi there,

I'm trying to understand VPN's and I've come to the stage where I am trying to setup and connect to a VPN server.
(At this stage its not important what the VPN server is, this is a general question)

In Windows 2k pro have you ever edited an "IP Security Policy"?

I'm still learning and this is probably wrong but I'd be interested to know if it is a misatke in Win 2k pro.

Add the "IP Security policy management" snap-in to MMC.
Select one of the policies(there should be three) and look at its properties
Edit the IP Security rule (there should be one)
Select the "Security Method" tab
Edit any of the existing security methods(there are five or six)
Select the "Custom(for expert users)".
There are two options AH & ESP.

You can select BOTH AH & ESP!. Shouldn't you only be able to select only one of these options. I thought that ESP already contained AH. If both were selected would that not mean AH was select twice?

If I am correct and this is a mistake(a small one) it would really help my understanding of IPSEC. Otherwise its back to the books.

Thanks for any assistance,