Which option he can use for layer 2 security provision?