[SOLVED] l2tp vs openvpn

redwhat · 09-24-2014, 01:53 AM

hi

i just bought vpn service to my linux machine,
i was use openvpn but every restart to my computer i need to log again
and it long process i need to go to folder select the file enter password and user name,

so i thought about change to l2tp,
what i want to ask is l2tp is secure enough to use if you
in unsecured home network and against man in the middle attack ?

rtmistler · 09-24-2014, 07:20 AM

L2TP has no security at all, it is purely a transport encapsulation protocol. Any security would have to be with something like IPSec.

redwhat · 09-24-2014, 07:55 AM

i want to apply this l2tp steps into my linux machine

https://support.hidemyass.com/hc/en-...etup-on-Fedora

is l2tp can offer similar security like openvpn ?
from protect my from unsafe home network and man in the middle attack ?

rtmistler · 09-24-2014, 08:24 AM

Quote:

Originally Posted by redwhat

i want to apply this l2tp steps into my linux machine

https://support.hidemyass.com/hc/en-...etup-on-Fedora

is l2tp can offer similar security like openvpn ?
from protect my from unsafe home network and man in the middle attack ?

Yes. Following that guide it tells you to set up encryption across the point to point link. It is technically not the L2TP protocol which is providing the encryption.

That method you're citing specifies MPPE which is Microsoft Point to Point Encryption, 128 bit encryption.

Openvpn can use 256 bit encryption; therefore a bit stronger. Openvpn also uses SSL and TLS; I'm unsure if MPPE uses those at all. Personally I feell openvpn is more secure.

redwhat · 09-24-2014, 08:37 AM

but do you think l2tp with MPPE can protect me from man in the middle attack ?
i am asking because openvpn require to make the process of connection to the server every time,
in l2tp i just move the on button to enable connection to the server.

rtmistler · 09-24-2014, 10:28 AM

Quote:

Originally Posted by redwhat

but do you think l2tp with MPPE can protect me from man in the middle attack ?
i am asking because openvpn require to make the process of connection to the server every time,
in l2tp i just move the on button to enable connection to the server.

Both of those will work to protect you against those types of attacks. What you're talking about really is "ease of use" because the semantics of setting up a connection and establishing the protection from end to end is still the same and it appears that the L2TP solution you wish to employ just flows easier. Doesn't mean that it isn't still establishing a full connection, but rather the way to control the connection is different between option #1 and option #2.

redwhat · 09-24-2014, 06:33 PM

ok
thank you for your help