RE: IPSec vs. IPSec/L2TP

["Mark Lewis" <mark () mjlnet com>]

Hi,

One reason that some people like to use L2TP/IPsec rather than just IPsec is
that L2TP/IPsec supports non-IP protocols such as IPX (over PPP). IPsec on
its own only supports the tunneling of IP, though these days IP is just fine
for most folks as far as simple remote access VPNs are concerned.

L2TP & L2TP/IPsec is most popular these days for service providers who want
to tunnel a load of PPP connections across their networks from a dial or
other access server (LAC) to a remote tunnel termination device (LNS).
Additionally, service providers have recently started to deploy L2TPv3
tunnels in order to transport other layer-2 protocols such as Frame Relay,
ATM, and even Ethernet- this allows them to merge their older Frame
Relay/ATM/other networks with their IP networks (saves them money!), as well
as allowing them to offer Ethernet MAN/WAN connectivity to their customers
(they can extract more money from their customers!).

Hope that helps!

Mark

CCIE#6280 / CCSI#21051 / JNCIS / etc.

Author: http://www.amazon.com/exec/obidos/tg/detail/-/1587051044/





> -----Original Message-----
> From: Bénoni MARTIN [mailto:Benoni.MARTIN () libertis ga]
> Sent: 08 April 2005 13:55
> To: security-basics () securityfocus com
> Subject: IPSec vs. IPSec/L2TP
>
>
> Hi list,
>
> I was wondering how much the security is enhanced by using
> L2TP/IPSec tunnelling instead of a good old IPSec tunnel. I found
> a lot of information googling around the web, but couldn't find a
> good paper explainig this enhancement (or not).
>
> If anyone cound give me any hint, personnal experience feedback
> or URL, this will be appreciated !
>
> Thx !
>
> ------------------------------------------------------------------
> ---------
> Earn your MS in Information Security ONLINE
> Organizations worldwide are in need of highly qualified
> information security
> professionals.  Norwich University is fulfilling this demand with
> its MS in
> Information Security offered online.  Recognized by the NSA as an
> academically excellent program, NU offers you the opportunity to
> earn your
> degree without disrupting your home or work life.
>
> http://www.msia.norwich.edu/secfocus_en
> ------------------------------------------------------------------
> ----------


---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information security 
professionals.  Norwich University is fulfilling this demand with its MS in 
Information Security offered online.  Recognized by the NSA as an 
academically excellent program, NU offers you the opportunity to earn your 
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------