MPLS VPN is a family of methods for using
Multiprotocol Label Switching
Multiprotocol Label Switching (MPLS) is a routing technique in telecommunications networks that directs data from one node to the next based on labels rather than network addresses. Whereas network addresses identify endpoints the labels identi ...
(MPLS) to create
virtual private networks (VPNs). MPLS VPN is a flexible method to transport and route several types of network traffic using an MPLS backbone.
There are three types of MPLS VPNs deployed in networks today:
1. Point-to-point (
Pseudowire)
2. Layer 2 (VPLS)
3. Layer 3 (VPRN)
Point-to-point (pseudowire)
Point-to-point MPLS VPNs employ VLL (
virtual leased lines) for providing Layer 2 point-to-point connectivity between two sites.
Ethernet
Ethernet () is a family of wired computer networking technologies commonly used in local area networks (LAN), metropolitan area networks (MAN) and wide area networks (WAN). It was commercially introduced in 1980 and first standardized in ...
,
TDM, and
ATM frames can be encapsulated within these VLLs.
Some examples of how point-to-point VPNs might be used by utilities include:
* encapsulating TDM
T1 circuits attached to
Remote Terminal Units
* forwarding non-routed
DNP3 traffic across the backbone network to the
SCADA
Supervisory control and data acquisition (SCADA) is a control system architecture comprising computers, networked data communications and graphical user interfaces for high-level supervision of machines and processes. It also covers sensors an ...
master controller.
Layer 2 VPN (VPLS)
Layer 2 MPLS VPNs, or VPLS (virtual private LAN service), offers a “switch in the cloud” style service. VPLS provides the ability to span VLANs between sites. L2 VPNs are typically used to route voice, video, and AMI traffic between substation and data center locations.
Layer 3 VPN (VPRN)

Layer 3, or VPRN (virtual private routed network), utilizes layer 3 VRF (VPN/virtual routing and forwarding) to segment routing tables for each customer utilizing the service. The customer peers with the service provider router and the two exchange routes, which are placed into a routing table specific to the customer.
Multiprotocol BGP (MP-BGP) is required in the cloud to utilize the service, which increases complexity of design and implementation. L3 VPNs are typically not deployed on utility networks due to their complexity; however, a L3 VPN could be used to route traffic between corporate or datacenter locations.
See also
*
Segment Routing
*
Ethernet VPN
External links
RFC 4364, BGP/MPLS IP Virtual Private Networks (VPNs)Virtual Private Network (VPN): A Very Detailed Guide for Newbies
MPLS networking
Virtual private networks