L2F (Layer 2 Forwarding) is a tunneling protocol used to transmit data across public networks by encapsulating Layer 2 frames inside other network packets. It was developed by Cisco Systems as an early solution for creating VPN-style connections.
L2F operates at the data link layer and is mainly used to forward PPP (Point-to-Point Protocol) traffic between a user and a remote network through an intermediary access device.
Table of Contents
How L2F works
L2F creates a tunnel between two network points:
- a user access point (for example, an ISP access server)
- a remote network gateway
When a connection is established, data frames are encapsulated and forwarded through the tunnel. On the receiving side, they are unpacked and delivered to the target network as if the connection were direct.
This allows users to access remote networks through public infrastructure while maintaining a logical private connection.
Key characteristics
- operates at OSI Layer 2 (data link layer)
- designed for tunneling PPP traffic
- developed by Cisco Systems
- enables forwarding of traffic between access servers and remote gateways
- supports multiple simultaneous sessions over shared infrastructure
Security considerations
L2F does not provide encryption by itself. It only encapsulates and forwards traffic. Any security, including encryption or authentication, must be handled by other protocols used alongside L2F.
Because of this limitation, L2F has been largely replaced by more modern tunneling technologies such as L2TP.
L2F and L2TP
L2F ≠ L2TP
L2TP (Layer 2 Tunneling Protocol) was created by combining concepts from L2F and PPTP to form a standardized tunneling protocol.
Compared to L2F:
- L2TP is standardized by IETF
- L2TP is more widely supported
- L2TP is typically used with additional security layers such as IPsec
Practical implications
L2F is considered a legacy protocol. It is rarely used in modern hosting environments, but it remains relevant as part of networking fundamentals and historical VPN development.
Understanding L2F helps explain how modern tunneling protocols evolved.
Summary
L2F is a Cisco-developed tunneling protocol that forwards Layer 2 traffic across public networks. It enables remote network access but does not include built-in encryption and has been replaced by more modern VPN technologies.