Is L2TP outdated?
I haven't heard much talk of it being upgraded to the point that it is being supported anymore.
Is the protocol as secure as PPTP? The security of L2TP versus PPTP?
If this has changed over the years (which I can't find any info on), what has been the change in security? PPTP is a relatively "new" concept and was really developed to address some of the issues that had become apparent with standard L2TP, like tunneling of packets containing the User ID/Password combination which was becoming fairly easy to break. Since then L2TP has been extended to take the place of PPTP's original purposes. This is probably more interesting than security for the typical desktop user, but it does play into one of L2TP's strengths, portability - you can connect to any network using your VPN tunnel, and as long as it supports the concept it will work regardless of the type of infrastructure you're connecting to. In particular L2TP also handles things like port redirection on the server-side (where an inbound packet arrives at a server in a different port than the port that it's actually going out on), providing a single tunnel end point, tunnel negotiation, and other such functionality.
So while PPTP was created to address specific issues, L2TP has been built to take advantage of its advantages and thus there's a lot more of it in the OSes, but in my experience it really doesn't create any extra problems for either of them. Also, this isn't really a security question - the only real security questions are how the data is protected when it's encrypted, and whether it's encrypted enough. You generally don't need to know the details of how it's done or how it's encrypted (although if you did you could use them to improve the strength of the algorithm).
What is L2TP in VPN?
It is a Layer 2 tunneling protocol for connecting a point-to-point network (typically a VLAN). L2TP is the second generation of VPN standards developed by the Internet Engineering Task Force (IETF) standards body.
It has many variations and is sometimes referred to as PPTP, the Layer 3 Tunnelling Protocol, or IPsec VPN. L2TP has always had the same basic properties as most tunneling protocols, which is its ease of use, scalability, interoperability, the ability to tunnel multicast packets through it and the presence of a "failover" system for managing multiple tunnels to prevent loss of connectivity to remote sites. What is OpenVPN? OpenVPN (in OpenWrt) is a free and powerful Open Source Virtual Private Network that provides an alternative way to use the Internet in a secure and private fashion, over the public Internet. The open source project began in 1999, with two aims in mind: To create a reliable and feature-rich software tool for the end-user, while at the same time providing an effective development platform for the community that would grow into a larger set of solutions. OpenVPN is not limited to VPNs and can also be used in combination with other Internet Protocols such as DNS or HTTP. When combined with a proxy, OpenVPN works well for HTTP over HTTPS and SSL over TCP/IP over VPN and may even provide an extra security level by adding support for a Transport Layer Security (TLS)-based virtual private network.
If you're new to using OpenVPN, please see the following video tutorials and articles on the Internet to learn how to get your first VPN setup up and running. How do I install OpenVPN? OpenVPN is already pre-configured and installed on OpenWrt by default. To get OpenVPN to start on bootup on the router, you will need to install the OpenWrt package wget and execute the following command: Extract the downloaded tarball and place the unzipped files in the OpenWrt directory /lib/modules/recovery/.
How to set up an L2TP VPN?
This article is designed for home users. In order to allow you to get access to your private network from outside of your company, we need to set up an L2TP VPN. This type of VPN is only available on certain devices that use Android or iOS as an OS. Most other devices require PPTP VPN, which is more secure. We will set up our VPN on a Nexus 7 tablet.
The first thing we have to do is make sure that the device is capable of running L2TP. The second thing we have to do is download OpenVPN Connect from Google Play Store.
First of all, connect your phone to your computer. When you have connected your phone to your computer, you will be prompted by your system about the possibility to install some applications.
Click on the Yes option in order to install OpenVPN Connect. You will be prompted to Allow from Unknown sources. Click on the OK option in order to allow this to happen.
After you click on the OK option, you will be able to install the application and after installation it will be visible on your computer. Open the app. A window will pop-up. In this window, enter the name of the network that you want to connect to. Make sure to enter the full name of the network.
When you have entered the name of the network that you want to connect to, click on the Add Network button. You will be prompted to Enter username and password. Type the username and the password of the user that you would like to have access to the network. You can type the username and the password of your personal user, or you can type the username and the password of the default user created when you installed OpenVPN Connect.
Once you have entered the username and the password, you will be asked if you are sure you want to connect to the network. Click on the Connect button in order to connect to the network.
You will be prompted with the warning message that it might take some time before you can access the network.
Is it safe to use L2TP VPN?
I would guess that this is a duplicate but my search yields only security advisories, not clear answers.
TLDR: Yes, for specific setups with specific users, it's likely that L2TP has just as much security risk as PPTP. The difference is simply one of choice. PPTP is better suited to a typical user that intends to use the service as-is, and that doesn't have too many other options, whereas L2TP is more commonly used by an organization or some larger enterprise where multiple users can connect to the VPN service simultaneously.
You can read more about how L2TP works here. From the link above: If Layer 2 tunneling (L2TP) was originally developed as a replacement for Point-to-Point Tunneling Protocol (PPTP), some people think that the same risk levels are applicable to L2TP and PPTP, due to the similarities in the way L2TP tunnels connections between an edge router and a customer host. However, this is not the case. L2TP does not provide data encryption or integrity protection.
Related Answers
Does Android support L2TP?
Add VPN Server using L2TP or PPTP. How to add VPN Server to Android...
Does Android 12 allow L2TP VPN?
Setup L2TP VPN on Android? Introduction. L2TP is the standard for...
Is L2TP still used?
Here's why I do not recommend L2TP over IPsec. This is not a critic...