3-2
Cisco 10000 Series Router Software Configuration Guide
OL-2226-23
Chapter 3 Configuring Remote Access to MPLS VPN
MPLS VPN Architecture
MPLS VPN Architecture
The MPLS VPN architecture enables the service provider to build the MPLS VPN network one time and
add VPNs for new customers as needed, including them in the already established network. The elements
that comprise the MPLS VPN are:
•
Customer edge (CE) routers—The CPE devices to which subscribers in a customer’s network
connect. The CE router connects to a service provider’s edge router (PE router). The CE router
initiates the remote access session to the PE router.
•
Provider edge (PE) routers—The router, such as the Cisco 10000 series router, located at the edge
of the service provider’s MPLS core network. The PE router connects to one or more CE routers and
has full knowledge of the routes to the VPNs associated with those CE routers. The PE router does
not have knowledge of the routes to VPNs whose associated CE routers are not connected to it.
•
Provider (P) routers—The service provider routers that comprise the provider’s core network. The
P routers do not assign VPN information and they do not have any knowledge of CE routers. Instead,
the main focus of the P router is on label switching.
Figure 3-1
shows an example of the MPLS VPN architecture.
Figure 3-1
MPLS VPN Network—Example
SP MPLS
core
SP access
network
69868
LAN
Remote
user
DSLAM
DSL router
PE
CE
Customer
network
Customer AAA
server
SP AAA
server
SP DHCP
server
PPPoE
PE
