VPN PPTP vs L2TP

[chicagotech]

I beleive L2TP is more secure. Quoted from Microsoft:

· PPTP connections require only user-level authentication through a PPP-based authentication protocol. L2TP/IPSec connections require the same user-level authentication and, in addition, computer-level authentication using computer certificates.


Also check this search result.

Which one is better, L2TP or PPTPA: PPTP is comparatively less secure than L2TP because L2TP does per packet authentication and integrity check using IPSec. But PPTP is easy to deploy. ...
www.chicagotech.net/Q&A/vpn45.htm

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com

> Can I get some opinion on PPTP vs L2TP VPN on Server 2003 for a small
> business?
>
> I originally thought L2TP with a pre-shared key would be best, but then I
> found this:
>
> "PPTP using MS-CHAPv2 or EAP-TLS authentication is more secure than L2TP
> with pre-shared key authentication".
>
> Any thoughts appreciated.
> Russell.
>
>

[guest]

Agree.

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com

>I think what you read is wrong.
>
> Both use MS-CHAPv2 or EAP-TLS authentication.
>
> L2TP uses IPSec based encryption on top of that.
>