Chapter 5. Protecting the MPLS-VPN Backbone

When the subject of security in a Multiprotocol Label Switching (MPLS) virtual private network (VPN) backbone is discussed, comparisons are inevitably made with VPNs that are delivered via Frame Relay or Asynchronous Transfer Mode (ATM) services. This most likely stems from the fact that before the existence of MPLS VPN technology, VPNs were delivered by using Layer 2 point-to-point connections such as ATM or Frame Relay permanent virtual circuits (PVCs). In the case of pre-MPLS Layer 3 service provider networks, generic routing encapsulation (GRE) or IP Security (IPSec) tunnels were the VPN provisioning mechanism. In any event, the primary responsibility of the service provider was to provide an end-to-end ...

Get MPLS and VPN Architectures, Volume II now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.