In real secure environment, ex. the extranet connection between banks, encryption is still required even arcoss private line, so that security risk of evasdropping or traffic tapping will be prevented.
Ipsec is layer 3 encryption protcol, could be running over any layer 3 ip network, regardless across Internet IP or private IP networks.
