7

Is it as secure to use L2TP for VPN access, rather than IPSEC? Am I introducing any risks by using L2TP?

1 Answer 1

4

L2TP does not provide any confidentiality or authentication. A common setup is using L2TP along with IPSEC (see RFC 3193).

EDIT: L2TP does provide tunnel end-point authentication. It does not provide encryption and message authentication.

2
  • In almost all cases when someone says "L2TP VPN" they mean L2TP/IPSEC VPN. While it is possible to set up a pure L2TP tunnel it is rarely done in practice.
    – bahamat
    Jan 9, 2011 at 10:30
  • 1
    Ah yes I guess I did mean L2TP/IPSEC VPN then. Jan 10, 2011 at 13:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.