IPSEC VPN over L2TP

[David Hatton]

We are looking at installing a link between two sites and the provider says it will be a L2TP VPN link.

We will need to create a IPSec site to site tunnel where part of its path will ride over this L2TP link.

Are there any problems with running a IPSec VPN over an L2TP link? I think it should work but wanted to get some feedback from experts.

Thanks!

Sent from Cisco Technical Support Android App

[Marcin Latosiewicz]

David,

Run a recent version of IOS 15.1.4M train perhaps.

There should not be a problem with IPsec over L2TP link for control plane, dataplane might however suffer due to added overhead - i.e. try avoiding fragmenttion :-)

L2TP is a layer 2 datapath technology, it should be transparent to L3 and above (where IPsec sits).

What's the config you are spepareing for l2tp? Dialer based?

M.