IPSec uses two distinct protocols, Authentication Header (AH) and Encapsulating Security Payload (ESP) , which are defined by the IETF. The AH protocol provides a mechanism for authentication only. AH provides data integrity, data origin authentication, and an optional replay protection service.