IPSec vs. L2TP/IPSec

[jbrooks66]

I am trying to get my vpn client setup but I'm not sure of the security difference between pure IPSec and L2TP/ipsec. I know ipsec works at the network layer and provides authenication, data confidentiality and message intergrity. While l2tp works at layer 2 providing tunneling but uses ipsec to encapsulate at layer 3 and provide all of the above first. Now since l2tp requires a username and password does this make it more secure? I am planning on using XP vpn client.

[a-vazquez]

Layer 2 tunneling protocols, such as L2TP, do not provide encryption mechanisms for the traffic it tunnels. Instead, they rely on other security protocols, such as IPSec, to encrypt their data. Use this sample configuration to encrypt L2TP traffic using IPSec for users who dial in