When IPsec VPNs are designed, what is a unique requirement if support for IP Multicast is required?
A. encapsulation of traffic with GRE or VTI
B. IPsec forwarding using transport mode
C. additional bandwidth for headend
D. IPsec forwarding using tunnel mode