Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

MPLS and IPSec

How can I link an MPLS VPN and an IPSec one? I know I terminate the IPSec on a VPN500x and route into a VLAN, but can I route an MPLS VPN into a VLAN, and if so, how?

Andy Billington

New Member

Re: MPLS and IPSec

MPLS is working Layer2,it insert a shim(label) between Layer2 header and Layer3 packet.When the frame traverse MPLS cloud(PE to PE),P routers just ckeck the label,and swap label.When the frame leave the MPLS cloud,the frame becomes original structure.IPsec is working layer3,so it can be over MPLS.

MPLS-VPN just can be available between PEs.

We can creat many subinterface under FE or GE trunk of 366x 720x 75xx,the FE or GE port is encapsulated ISL or 802.1q.

We can set the VPN500x as CE.The structure is VPN500x-PE-P-PE-VPN500x.

About the VLAN,we just treat it as a subinterface in the PE.

CreatePlease login to create content