Oh, strange, I didn't receive your answer by mail...

I actually have no idea if MPPE is used in my 1.20.10-1 log, I just
configured it as I was told and never thought about it :)

Now that I documented myself, it makes sense that IPSEC is much
stronger. The l2tp tunnel being protected by IPSEC, there is no need for
MPPE at the l2tp level.

So now I can upgrade and adapt my configurations, but it would probably
be interresting to disable the MPPE possibility if IPSEC is used: make
it unselectable in the gui, or not enforce it when the vpn is created.

Thanks,
-- 
Rémi Letot

Reply via email to