What is the point of using L2TP with IPSec?

According to my limited understanding, IPSec authenticates peers and encapsulates / encrypts IP packets in tunnel mode.

On the other hand, L2TP itself does not offer authentication / encryption, but offers encapsulation, which has already been achieved using IPSec.

In my application, I would like to provide end-to-end data transfer using IPSec. I am also looking at "L2TP / IPSec", but can't figure out which L2TP feature is not offered by IPSec? Why should I use L2TP / IPSec, and not just IPSec?

+4
source share
1 answer

The reason people use L2TP / IPsec rather than simple IPsec in tunnel mode is because the user level authentication level is in addition to the host level authentication provided by IPsec.

Link: http://seclists.org/basics/2005/Apr/139

+1
source

Source: https://habr.com/ru/post/1500225/


All Articles