As I understand RB1100 does not have the RB1000 capability of hardware accelerated IPSec cryp/decrype engine.

IS this dedicated hardware only use in IPsec or L2TP would also benefits from that?

L2TP provides absolutely no confidentiality and does not encrypt tunneled data.

Fewi,

But when I use a PPP-Profile associated to this L2TP with default-encryption set to yes, I guess it is encryted and somewhat secure? Would that default-encryption setting benefits from the hardware assisted chip in the RB1000?

Martin

Yes, but that PPP security is technically outside of L2TP. L2TP is often used to transport PPP, which can offer some encryption (though by comparison to other protocols the encryption is not particularly strong, but it may well be sufficient).

I don't know if that can be hardware offloaded on the RB1000.