Which commands set up a basic L2TP/IPsec server and create a PPP secret for a user?

Which commands set up a basic L2TP/IPsec server and create a PPP secret for a user?

• A. /interface l2tp-server server set enabled=yes; /ppp secret add name=user1 password=pass profile=default-encryption service=l2tp
• B. /interface l2tp-server server set enabled=yes; /ppp secret add name=user1 password=pass service=pptp
• C. /interface l2tp-server server set enabled=no
• D. /interface l2tp-server server set enabled=yes; /ppp secret add name=user1 password=pass service=pptp

Answer: (A)

Setting up an L2TP/IPsec server starts with enabling the L2TP server so it can accept connections, then creating a PPP secret for the user that will authenticate over L2TP. The best option enables the L2TP server and adds a PPP secret with the service set to l2tp, which links the user’s credentials to the L2TP tunnel and uses a strong encryption profile for the PPP session. Using PPTP in the PPP secret would configure a different VPN protocol, and disabling the L2TP server or enabling it but tying the secret to PPTP would not establish an L2TP/IPsec setup. Therefore, this approach is the correct basic configuration.

Setting up an L2TP/IPsec server starts with enabling the L2TP server so it can accept connections, then creating a PPP secret for the user that will authenticate over L2TP. The best option enables the L2TP server and adds a PPP secret with the service set to l2tp, which links the user’s credentials to the L2TP tunnel and uses a strong encryption profile for the PPP session. Using PPTP in the PPP secret would configure a different VPN protocol, and disabling the L2TP server or enabling it but tying the secret to PPTP would not establish an L2TP/IPsec setup. Therefore, this approach is the correct basic configuration.