A network engineer is configuring a remote access Virtual Private Network (VPN) solution using Layer 2 Tunneling Protocol over IPsec (L2TP/IPsec) for corporate users. Which of the following technical characteristics and operational requirements correctly apply to this deployment? (Select TWO.)
- L2TP relies on the IPsec Encapsulating Security Payload (ESP) protocol to provide payload confidentiality and encryption.Answer
- The initial Internet Key Exchange (IKE) negotiation phase operates over UDP port 500.Answer
- CL2TP provides native payload encryption over TCP port 443 without requiring additional security headers.
- DL2TP frame encapsulation operates over connection-oriented TCP port 1701 to guarantee reliable transport.
Answer
L2TP relies on IPsec ESP for encryption, and the initial IKE key exchange negotiation phase operates over UDP port 500.
L2TP provides multi-protocol tunneling mechanisms but relies on IPsec ESP to encrypt packet contents. Furthermore, IPsec uses IKE over UDP port 500 to establish the initial security associations necessary for secure communication.
Step-by-Step Solution
Key Concept
L2TP/IPsec VPN Protocol Requirements and Port Usage