MPLS is working Layer2,it insert a shim(label) between Layer2 header and Layer3 packet.When the frame traverse MPLS cloud(PE to PE),P routers just ckeck the label,and swap label.When the frame leave the MPLS cloud,the frame becomes original structure.IPsec is working layer3,so it can be over MPLS.
MPLS-VPN just can be available between PEs.
We can creat many subinterface under FE or GE trunk of 366x 720x 75xx,the FE or GE port is encapsulated ISL or 802.1q.
We can set the VPN500x as CE.The structure is VPN500x-PE-P-PE-VPN500x.
About the VLAN,we just treat it as a subinterface in the PE.
