L2F (Layer 2 Forwarding Protocol) is a tunneling protocol designed to create virtual private networks. It was developed by Cisco Systems in 1996 to tunnel PPP (Point-to-Point Protocol) traffic.
L2F was created as an alternative to another tunneling protocol, PPTP. Compared with PPTP, L2F supported a broader range of networking technologies. The underlying network used to transport tunneled traffic could operate over IP or other protocols and technologies, including PPP, SLIP, and X.25. This made L2F particularly useful for Internet service providers.
Features of L2F
L2F does not provide traffic encryption itself, so it cannot create a fully secure VPN tunnel on its own. Its primary purpose is tunneling rather than encryption. Additional protocols or security mechanisms are therefore required when confidentiality and authentication are needed.
L2F can carry traffic from network protocols such as IP, IPX, and NetBEUI. These protocols can be encapsulated within a remote-access protocol such as PPP, which operates over the public network. L2F then acts as the control and tunneling mechanism responsible for establishing, maintaining, and terminating the tunnel.
Disadvantages of L2F
As noted above, L2F does not provide end-to-end encryption between the user's device and the destination VPN endpoint. In the traditional L2F architecture, the user's traffic is tunneled between a Network Access Server (NAS) operated by the service provider and a gateway on the private network. The connection between the user's computer and the provider's access server may therefore remain unencrypted at the L2F layer.
L2F is now considered obsolete and is no longer used in modern VPN deployments. Its successor, L2TP (Layer 2 Tunneling Protocol), was developed by combining capabilities from L2F and PPTP and effectively superseded L2F in the VPN industry.