The MPLS WG Archive

[djiang1@lucent.com]

---------------------- Forwarded by Jane Jiang/HQ/Yurie on 03/06/2001 01:55
PM ---------------------------


Jane Jiang
03/06/2001 08:34 AM

To:   "chengguangdong" <frankcheng@commverge.com>
cc:
Subject:  Re: How to integrate MPLS and IPSec in IP VPN  (Document link:
      Jane Jiang)

Hi Cheng Guang Dong,

MPLS VPN and IPsec are two different things.  They should not conflict with
each other.  If you do IPsec in tunnel mode, i.e., fully hide your
customer's traffic at the CPE routers and then do MPLS forwarding based on
the CPE router addresses, then you should be able to achieve MPLS VPN and
IPsec at the same time.

Regards,
Jane D. Jiang



"chengguangdong" <frankcheng@commverge.com>@UU.NET on 03/06/2001 04:23:01
AM

Sent by:  owner-mpls@UU.NET


To:   <nbvpn@bbo.com>, <mpls@UU.NET>
cc:
Subject:  How to integrate MPLS and IPSec in IP VPN


Hi All,
Our customer want to build VPN based MPLS but he needs the traffic must be
encrypted before they go to PE routers. In order to provide confidentiality
and any to any connection, the CE routers must be IPSec full meshed , this
would be nightmare for a VPN with hundreds CE routers  and conflicts with
the advantage of MPLS VPN----simple provisioning.
So what are the solutions. I will be very appreciated  if  I can get your
answer.

Best Regards,
Cheng Guang Dong