7

Is it as secure to use L2TP for VPN access, rather than IPSEC? Am I introducing any risks by using L2TP?

1 Answer 1

4

L2TP does not provide any confidentiality or authentication. A common setup is using L2TP along with IPSEC (see RFC 3193).

EDIT: L2TP does provide tunnel end-point authentication. It does not provide encryption and message authentication.

2
  • In almost all cases when someone says "L2TP VPN" they mean L2TP/IPSEC VPN. While it is possible to set up a pure L2TP tunnel it is rarely done in practice.
    – bahamat
    Jan 9, 2011 at 10:30
  • 1
    Ah yes I guess I did mean L2TP/IPSEC VPN then. Jan 10, 2011 at 13:15

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .