VPN allows you to combine AH and ESP for host-to-host connections in transport mode.
Combining these protocols protects the entire IP datagram. Although combining the two protocols offers more security, the processing overhead involved may outweigh the benefit.