What is IPSec/L2TP?
L2TP (Layer 2 Tunneling Protocol) is a tunneling protocol widely supported by routers and operating systems. On its own it doesn't encrypt traffic, so it's combined with IPSec, which adds the encryption and authentication layer. Together, IPSec/L2TP form a secure VPN tunnel that's native to most network equipment, with no need to install additional software.
In Cpehub, this tunnel is used so the system can reach your OLTs (Cpehub server) and so the ACS can reach the CPEs (ACS server), the same way WireGuard is used.
IPSec/L2TP is one of the VPN tunnel protocols supported by Cpehub. Use it when your infrastructure already works with L2TP/IPSec, or when you prefer a standard native to routers (e.g., Mikrotik). If you're starting from scratch, WireGuard is usually simpler to set up. OpenVPN is coming soon. See the Communication overview to compare.
How the topology works
In IPSec/L2TP, the ISP side runs the L2TP server and Cpehub connects as a client, using a username, password, and a pre-shared key (PSK). In other words:
- ISP side (your router): brings up an L2TP Server + IPSec and creates the credentials.
- Cpehub side: you register the VPN, providing those credentials so the system can connect to your router.
How to configure
Setup has two parts:
- Create the VPN in the system (Cpehub side):
- Configure the L2TP server on the ISP's equipment (ISP side):
You can configure it on any equipment that supports an L2TP Server with IPSec; if in doubt, talk to the support team.