What Is L2TP/IPSec?

L2TP paired with IPSec is a widely supported VPN protocol built into most operating systems - useful for manual setups where no dedicated app is available, though it's not our top recommendation. For most people, Wireguard or Stealth Wireguard via the app is faster and simpler. Here's what L2TP/IPSec is, how the two pieces fit together, and how to set it up with Le VPN if you specifically need it.

L2TP/IPSec - the lowdown

Layer 2 Tunneling Protocol (L2TP) builds the tunnel that carries your VPN traffic, but on its own it provides no encryption at all. That's where IPSec (Internet Protocol Security) comes in: it wraps L2TP's tunnel in strong encryption and authenticates both ends of the connection before any data moves.

Together, L2TP/IPSec is one of the most widely supported VPN setups - it's built into Windows, macOS, Android, and iOS, which is why it's a common choice for manual VPN configuration when a dedicated app isn't available or isn't an option.

The pros and cons of L2TP/IPSec

Pros

Built into Windows, macOS, Android, and iOS - no third-party app required for manual setup.
Strong encryption and mutual authentication via IPSec.
Straightforward to configure manually with just a server address and a shared secret.

Cons

Uses fixed ports, which makes it easier for some networks and ISPs to detect and block than OpenVPN.
The double encapsulation (tunnel + encryption) can be slightly slower than lighter protocols like Wireguard.
Not included in the current Le VPN Android or iOS apps - it's a manual setup on those platforms.

Set up L2TP/IPSec with Le VPN

For the best speed and security, use Wireguard or Stealth Wireguard via our new Windows, Android, or iOS app instead. Specifically need L2TP - an older device, a router, or a network that only allows it? On Windows and macOS, our legacy app supports L2TP natively. On Android and iOS, L2TP is a manual setup using the device's built-in VPN settings and the shared secret levpnsecret. Pick your device below.

Want to compare L2TP/IPSec to Le VPN's other protocols first? See the full protocol overview.

Quick recap

L2TP/IPSec pairs two technologies: L2TP (Layer 2 Tunneling Protocol) builds the tunnel that carries your traffic, while IPSec (Internet Protocol Security) wraps that tunnel in strong encryption and authenticates both ends. It's built into Windows, macOS, Android, and iOS, which makes it a common choice for manual setup when no dedicated app is available - though Le VPN recommends the faster, simpler Wireguard or Stealth Wireguard for most people.

L2TP (Layer 2 Tunneling Protocol) builds the tunnel but provides no encryption on its own.
IPSec (Internet Protocol Security) adds the encryption and mutual authentication that secure the L2TP tunnel.
Built into all major operating systems, so no third-party app is needed for manual setup.
Uses fixed ports (easier to block than OpenVPN) and its double encapsulation can be slightly slower than Wireguard.
Le VPN recommends Wireguard or Stealth Wireguard first; use L2TP/IPSec only when a device, router, or network requires it.