MPLS VPN or IPsec VPN over MPLS VPN

oldcreek12 · ‎01-09-2009

Hi,

We are considering to order a service provider's MPLS VPN service to connect branches and HQ, but since traffic over vanilla MPLS VPN is not encrypted, I am a little concerned about the data confidentiality. Should I run IPsec VPN over MPLS VPN?

royalblues · ‎01-09-2009

If you want to encrypt the traffic flow, you can inplement Ipsec VPNs from CE to CE over the MPLS VPN or DMVPNs

http://www-search.cisco.com/en/US/docs/ios/12_2t/12_2t13/feature/guide/ftgreips.html

Narayan

ankurdalal · ‎01-11-2009

Yes Jiangu, running IPSec over MPLS should solve ur problem and will ensure security.

The only major disadvantage of this would be if u run real time applications as they need some excellent security level and QoS which sometimes is not guaranteed by a service provider.

Cheers,

Ankur Dalal