A network security analyst is reviewing a remote access VPN architecture that combines Layer 2 Tunneling Protocol (L2TP) with IPsec alongside a centralized AAA server infrastructure. Which of the following statements correctly describe the technical protocol characteristics and operational requirements of this solution? (Select TWO.)
- L2TP handles data link layer encapsulation for remote connections but does not inherently provide payload confidentiality, requiring IPsec for encryption.Cevap
- IPsec Internet Key Exchange (IKE) phase 1 negotiations use UDP port 500 to establish the initial Security Association (SA) between endpoints.Cevap
- CIPsec Authentication Header (AH) functions at the Application layer (Layer 7) to provide robust symmetric payload encryption across untrusted networks.
- DRADIUS encrypts the entire packet payload during transmission, while TACACS+ encrypts only the password field of the authentication request.
Cevap
The correct statements are that L2TP provides data link layer encapsulation while relying on IPsec for encryption, and that IPsec IKE phase 1 negotiations communicate via UDP port 500.
L2TP provides frame tunneling at Layer 2 but does not specify cryptographic protection. Consequently, L2TP relies on IPsec to provide confidentiality and integrity. Additionally, IPsec uses IKE on UDP port 500 to establish Security Associations and exchange keys during phase 1 setup.
Adım Adım Çözüm
Anahtar Kavram
L2TP/IPsec Protocol Integration and Centralized AAA AAA Characteristics