Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Securing L2TP and IP Tunnels with IPsec Platform Considerations

    For information about modules that support L2TP and IP tunnels with IPsec on the ERX7xx models, ERX14xx models, and ERX310 Broadband Services Router:

    • See L2TP network server (LNS) and L2TP access concentrator (LAC) support in the ERX Module Guide, Table 1, Module Combinations for detailed module specifications.
    • See LNS and LAC support in the ERX Module Guide, Appendix A, Module Protocol Support for information about modules that support LNS and LAC.

    For information about modules that support L2TP and IP tunnels with IPsec on E120 and E320 Broadband Services Routers:

    • See LNS and LAC support in the E120 and E320 Module Guide, Table 1, Modules and IOAs for detailed module specifications.
    • See LNS and LAC support in the E120 and E320 Module Guide, Appendix A, IOA Protocol Support for information about modules that support LNS and LAC.

    Module Requirements

    To create IPsec-secured tunnels, you must install an IPsec Service module (ISM) in the ERX router. The ISM is a security gateway and functions as one of the endpoints for secure tunnels. The tunnel endpoints are the tunnel source and the tunnel destination IP addresses. For an L2TP/IPsec tunnel, the source is the L2TP network server (LNS) and the destination is the L2TP access concentrator (LAC).

    For information about installing ISMs in the ERX routers, see the ERX Hardware Guide.

    Published: 2014-08-12