What do mean by tunnel mode?
This is a mode of data exchange wherein two communicating computers do not use IPSec themselves. Instead, the gateway that is linking their LANs to the transit network makes a virtual tunnel that uses the IPSec protocol to secure all communication that passes by it.