A method and apparatus are provided for processing a data packet. Policy data that specifies nested encapsulation may be identified based upon one or more attributes of the data packet. Based upon first policy data that specifies two or more encapsulations to be applied to a data packet, second policy data may be generated that specifies nested encapsulation to be applied to the data packet.