(Layer 2 Tunneling Protocol) A protocol from the IETF that allows a PPP session to travel over multiple links and networks. L2TP is used to allow remote users access to the corporate network. PPP is used to encapsulate IP packets from the user's PC to the ISP, and L2TP extends that session across the Internet. L2TP was derived from Microsoft's Point-to-Point Tunneling Protocol (PPTP) and Cisco's Layer 2 Forwarding (L2F) technology. See PPTP and L2F.
From Access Concentrator to Network Server
The "L2TP Access Concentrator" (LAC) encapsulates PPP frames with L2TP headers and sends them over the Internet as UDP packets (or over an ATM, frame relay or X.25 network). At the other end, the "L2TP Network Server" (LNS) terminates the PPP session and hands the IP packets to the LAN. L2TP software can also be run in the user's PC.
Carriers also use L2TP to offer remote points of presence (POPs) to smaller ISPs. Users in remote locations dial into the carrier's local modem pool, and the carrier's LAC forwards L2TP traffic to the ISP's LNS.
L2TP and IPsec
L2TP does not include encryption (as does PPTP), but is often used with IPsec in order to provide virtual private network (VPN) connections from remote users to the corporate LAN. See PPP, VPN and IPsec.
PPP and L2TP Traffic
PPP encapsulates IP packets from the user's PC to the ISP. L2TP tunnels those packets over multiple links.
From Access Concentrator to Network Server
The "L2TP Access Concentrator" (LAC) encapsulates PPP frames with L2TP headers and sends them over the Internet as UDP packets (or over an ATM, frame relay or X.25 network). At the other end, the "L2TP Network Server" (LNS) terminates the PPP session and hands the IP packets to the LAN. L2TP software can also be run in the user's PC.
Carriers also use L2TP to offer remote points of presence (POPs) to smaller ISPs. Users in remote locations dial into the carrier's local modem pool, and the carrier's LAC forwards L2TP traffic to the ISP's LNS.
L2TP and IPsec
L2TP does not include encryption (as does PPTP), but is often used with IPsec in order to provide virtual private network (VPN) connections from remote users to the corporate LAN. See PPP, VPN and IPsec.
PPP and L2TP Traffic
PPP encapsulates IP packets from the user's PC to the ISP. L2TP tunnels those packets over multiple links.
 | Reproduced with permission from Computer Desktop Encyclopedia. Copyright (c) 1981-2008 The Computer Language Company Inc. All rights reserved. |
Additional Resources
- Linksys WRT610N Simultaneous Dual-N Band Wireless Router
- Editor's note: Although our First Look video states that the WRT610N costs only $149, the street price may prove higher.The Linksys WRT610N Simultaneous Dual-N Band Wireless Router is the first true dual-band wireless router we've reviewed, and one of only a few on the market. In our tests, it easily...
- Product reviews 2008-07-17
- D-Link DGL-4500 GamerLounge Xtreme N Gaming Router
- The D-Link DGL-4500 GamerLounge Xtreme N Gaming Router offers decent performance and a long list of features for home wireless networking and hardcore gamers. However, it lacks support for simultaneous 2.4GHz and 5GHz bands along with random resets during heavy loads. You may want to wait for a successor to...
- Product reviews 2008-02-26
- Windows Server 2008 and Vista SP1 RTM today
- Microsoft has reached a major milestone today for its Windows Server and Client products. Windows Server 2008 and Windows Vista Service pack 1 have been released to manufacturing today which means they will soon be available to IT customers and consumers. Windows Server 2008 replaces the venerable Windows...
- Blog posts 2008-02-04
- Step-by-Step Guide: Deploying SSTP Remote Access
- Secure Socket Tunneling Protocol SSTP is a new form of VPN tunnel with features that allow traffic to pass through firewalls that block PPTP and L2TP/IPsec traffic. SSTP provides a mechanism to encapsulate PPP traffic over the SSL channel of the HTTPS protocol. The use of PPP allows support for...
- White papers 2007-12-01
- Fine Packet Builder (jar)
- With "Fine Packet Builder", user can create, edit, copy, encode, and decode packet constructed by any protocol stack; use packet database to save and manage at external media, communicate on L2. And popular script APIJython of each feature, support screen and wizard of each feature, environment for edition, management, implementation...
- Software downloads 2007-08-27
- How to protect your online privacy
- If you want to avoid being compromised when using typical Wi-Fi hotspots that have no security, you can use the following table as a reference of protocols you should and shouldn't use. The insecure protocols should be banned and never used again; the protocols on the right are the secure...
- Blog posts 2007-08-06
- Palm Foley with Linux threatens the Laptop
- At the Digital Experience in New York this week, Palm demonstrated the simplicity of their Foley 2 pound sub-notebook device that can potentially replace a full blown laptop for mobile workers. I was initially very skeptical of such a device until I saw it turn on and off instantly with...
- Blog posts 2007-07-02
- Rumor: iPhone to feature VPN and QuickLook
- A rumor over at 9 to 5 Mac says that iPhone will ship with two previously-unannounced features when it ships next week: a VPN client: The iPhones will have the standard OSX VPN client when they ship next week. This will allow connecting to Macintosh and Windows VPN Servers on...
- Blog posts 2007-06-22
- Why VPN can't replace Wi-Fi security
- Every time the subject of wireless LAN security comes up, people ask me about VPN as a solution for securing Wi-Fi (Wi-Fi is the common marketing name for 802.11 wireless LANs). Ive always told people that VPN security shouldnt be a substitute for good Wi-Fi security and I even...
- Blog posts 2007-05-12
- SHA-1 Perspective, minus two
- SHA-1 Perspective, minus two"reasonable" perhaps but not agreed with by any security specialists"pretty much puts a bullet in SHA-1" is how Bruce Schneider Counterpane Internet Security described it here:http://www.computerweekly.com/Articles/2005/03/08/208736/companies-forced-to-reconsider-security-as-sha-1-code-is.htmby comparison, George Ou:"But to put this event in the proper perspective, the finding of a hash collision does not mean the...
- Discussion threads 2007-01-24
- Cryptography interview with the NSA
- Cryptography interview with the NSAwhats funny is...I'm currently reading Dan Brown's "Digital Fortress" all about the NSA and TRANSLTR (their 2 million core public key crunching monster) and crypto labs.. Its a good read :)Good ReadNice to know where the flaws are in the system. And Snow is right....
- Discussion threads 2007-01-04
- TechNet Webcast: Protecting Branch Offices With Internet Security and Acceleration (ISA) Server 2006 (Level 200)
- This webcast describes the tasks required for deploying a Microsoft Internet Security and Acceleration ISA Server 2006 solution in a branch office. The presenter explains how to configure both the headquarters and branch office sites, and how to deploy a site-to-site Virtual Private Network VPN connection using the Layer two...
- Webcasts 2006-08-16
- Strategic partnership destined for failure: directionless Microsoft, overmatched Nortel
- Strategic partnership destined for failure: directionless Microsoft, overmatched NortelAhem...the verdict is coming soon...Microsoft is a company in search of a future. It's been looking for other revenue streams than the OS and prod suite for a few years now (e.g. xbox, win embedded, etc.). Bottom line is that...
- Discussion threads 2006-07-19
- NeoAccel SSL VPN-Plus: The Future of Virtual Private Networks
- VPN Virtual Private Network technology was created to enable secure communications over public networks. Current VPN technology permits using the public Internet or any IP network as if it were a private leased line between end-points, providing secure access to all private resources. Earlier generations of VPN technology were "Narrow"...
- White papers 2006-02-08
- Configure VPN 3000 concentrators to accept PPTP, L2TP/IPsec, and WebVPN remote access sessions
- This sample chapter, taken from The Complete Cisco VPN Configuration Guide, focuses on the configuration of the concentrator to support certain types of remote access VPN implementations. Learn how to configure remote access sessions: PPTP, L2TP/IPsec, and WebVPN.This sample chapter, taken from The Complete Cisco VPN Configuration...
- Book chapters 2006-02-06
- 10 things you should know about troubleshooting VPN connections
- When you run into VPN problems, it helps to have a list of solutions to fall back on. Here are some of the most common issues encountered with VPN connections and advice on what to do about them. Virtual private networking provides a secure and convenient way...
- Download resources 2005-08-31
- Why the computing world chose PKI
- In Phil Zimmermann's response to "Does Phil Zimmermann need a clue on VoIP", Zimmermann offered a blistering attack on PKI based solutions and offered his own PGP solution as the superior alternative. There is just one little problem: the computing world chose PKI for the most part while PGP...
- Blog posts 2005-08-09
- PPTP VPN authentication protocol proven very susceptible to attack
- PPTP VPN authentication protocol proven very susceptible to attackThis is a frightening blog entryI hope that the right people read it.Stephenlong time has gone but have people really get thisalthough such a long time has passed since the vulnerabilities of pptp in combination with ms-chapv2 have been revealed, there...
- Discussion threads 2005-01-11
- While you were X-Mas shopping, there was a PPTP trainwreck
- While it's month old news, I'm just now realizing that we never surfaced an important report into Between the Lines that was written in December by ZDNet blogger George Ou. Ou unearthed a critical security weakness in one of the most commonly deployed methods for establishing virtual private networks...
- Blog posts 2005-01-10
- PPTP VPN authentication protocol proven very susceptible to attack
- Later today, Joshua Wright will release an upgraded version of his ultra-high speed password cracking tool called ASLEAP . For those of you already familiar with ASLEAP, you might be wondering what this has to do with Microsoft's PPTP VPN protocol since ASLEAP is a LEAP authentication dictionary attack tool....
- Blog posts 2004-12-17
Neighboring Terms
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- Access the latest Intel and industry best practices
-
Designed specifically to address the concerns of senior IT managers at organizations with more than 100 employees, the Intel Premier IT Professional Program provides best practices via local and e-Seminars and a members-only Web site.
- View the Intel Premier IT Professional web-site tour >>
- Sports and Technology
-
Major League Baseball pitches new app to iPhone users
At Apple's Worldwide Developers Conference in San Francisco, Jeremy Schoenherr of MLB.com demos At-Bat, a new iPhone app from Major League Baseball.
View the ZDNet video to learn more -
The SF Giants' new hi-tech ballpark
SF Giants CIO Bill Schlough discusses new technology upgrades at AT&T Park and outlines his dual role- managing technology operations at the backend while using hi-tech to improve player performance on the field.
View the ZDNet CIO Vision Series video - From our Sponsors
- Fantasy Football
-
-
3 Great Ways To Play Fantasy Football
Play for free, play to win cash prizes- up to $3500, or customize your own league.
Learn More » -
