diff --git a/package-21.02/kernel/crypto-eip/src/xfrm-offload.c b/package-21.02/kernel/crypto-eip/src/xfrm-offload.c
index 1f29dd0..0119b0a 100644
--- a/package-21.02/kernel/crypto-eip/src/xfrm-offload.c
+++ b/package-21.02/kernel/crypto-eip/src/xfrm-offload.c
@@ -286,8 +286,9 @@
 	 * EIP197 does not support fragmentation. As a result, we can not bind UDP
 	 * flow since it may cause network fail due to fragmentation
 	 */
-	if (ntohs(skb->protocol) != ETH_P_IP
-	    || ip_hdr(skb)->protocol != IPPROTO_TCP) {
+	if (!skb_hnat_tops(skb)
+	    && (ntohs(skb->protocol) != ETH_P_IP
+		|| ip_hdr(skb)->protocol != IPPROTO_TCP)) {
 		skb_hnat_alg(skb) = 1;
 		return false;
 	}