Where do you turn encryption on or off for a PPP based tunnel?

• A. Client
• B. Profile
• C. Interface
• D. Firewall

Answer: (B)

Encryption for a PPP-based tunnel is configured in the PPP profile. The profile defines properties that apply to all PPP connections using it, including whether the PPP data channel should be encrypted (via MPPE for PPTP/L2TP). Once a user/secret is linked to that profile, the encryption setting applies automatically to that tunnel. It isn’t set per client, per interface, or in the firewall—those areas handle authentication, interfaces, and filtering, but not the PPP-level encryption policy. To enable it, edit the PPP profile and enable Use Encryption (MPPE) for the appropriate profile. For L2TP over IPsec, encryption is handled by IPsec rather than MPPE, so the profile option is mainly relevant for PPTP/L2TP with PPP.