
128 Chapter 4: Secure MPLS VPN Designs
NOTE Recommendation
To implement interprovider VPNs, the most secure option today is model A. We
recommend using this model as long as the scalability requirements permit. Model B can
be used in an interprovider setup only with some specific security measures put in place.
Model C is not suitable for general interprovider VPNs.
As previously mentioned, if several autonomous systems are under one administrative
control, all models—even model C—can be deployed today.
Another option for providing a multiprovider scenario is the so-called “hierarchical
MPLS,” where a carrier buys an MPLS VPN from another carrier ...