VPN tunnels using popular technologies like IPSec or GRE have helped a lot of companies securely transport their data across a shared infrastructure over the past several years. However, these tunnels have only two end points.
Requires Free Membership to View
SearchEnterpriseWAN.com members gain immediate and unlimited access to breaking industry news, best practices for designing and managing Wide Area Networks, WAN Security, and more -- all at no cost. Join me on SearchEnterpriseWAN.com today!
Kate Gerwig, Editorial Director
They are particularly useful when an organization only has two geographic sites or their
data needs to be transported between only two locations, but for organizations with many endpoints,
many VPN tunnels are required. These tunnels quickly become difficult to manage and difficult to
troubleshoot.
A solution to the problem of multiple endpoints that is gaining popularity is Multi-protocol Label Switching (MPLS), which offers a secure "any-to-any" VPN service across a shared infrastructure (like your service provider's WAN) by switching packets based on their labels. Although it's not the same, it may help to think of MPLS as a way to make multiple VLANs on your service provider's backbone.
If you're considering MPLS to replace a plethora of VPN tunnels, consider one more thing: VRF Lite. While most sites connecting to a VPN are analogous to one port on a VLAN (that is, they're only connected to one virtual network on the shared backbone), sometimes you want multiple virtual networks at a location to share a single access circuit to the backbone, because access-circuits are one of the most expensive components in your network. VRF Lite is a technology that allows you to extend multiple virtual networks from the MPLS network onto your premise without the expense of actually extending the MPLS network.
Find more resources and information about MPLS VPN technology:
- Read more on how to implement MPLS for VPNs and networks with our comprehensive MPLS technology tutorial
- Read our guide to MPLS VPN/Ethernet VPLS edge networking services
- Learn about the different classes of MPLS services and which is the best to select for your WAN
Thomas Alexander Lancaster IV is a consultant and author with over ten years experience in the networking industry, focused on Internet infrastructure.
This was first published in March 2003