MPLS and VPN Architectures, Volume II

Internet Access

The provision of Internet access in an MPLS VPN network can be as straightforward as provisioning a default route within a VRF that points to one or more egress gateways. When a customer requires the full or partial BGP Internet routing table via one or more egress gateways, then the global routing table should be used.

The provision of simple Internet access using the default route to an MPLS-VPN uses the same procedures as for provisioning extranets. In fact, from an MPLS-VPN perspective, you could consider Internet access using the default route as nothing more than a giant extranet with a much larger potential for security breaches.

The provision of Internet access to most small- to medium-sized enterprise customers generally ...