From: Paul Schultz (khyron@xxxxxxxxxxxxx)
Date: Wed Aug 22 2001 - 00:03:54 GMT-3
Simplicity - GRE
Security - IPSec
Scalability - MPLS (under argument)
At this point MPLS VPNs are more hype than anything. Unless your carrier
actually agrees to do tag switching on the interface that ties you into
the VRF you can't really do BGP across your VPN.. The main difference is
GRE and IPSec VPNs are provisioned by you, MPLS VPNs are provisioned by
your ISP and you have little or nothing to do with the actual process. So
if you're not getting any additional benefits like TE tunnels then just
stick to GRE or IPSec.
MPLS isn't near as secure as IPSec (as with MPLS nothing is encrypted) but
it does give you almost the same security level as frame
relay. 3rd party viewing is possible but extremely unlikely.
Paul
On Tue, 21 Aug 2001, Andy Singh wrote:
> Sorry for the off-topic message group. I was looking for comments on IPSec
> vs. MPLS vpn tunneling. We have bunch of co-lo location that are connected
> to each other over IPSEC. They are all being hosted by the same provider and
> on the same backbone. I was wondering if there will be any performance
> difference between ipsec and Mpls vpn.Also how secure is Mpls vpn vs Ipsec.
> If we was to go Mpls route what are some of things we'd need from the ISP
> and what would we configure at out co-lo.
> I'm just looking for some direction to go on. Thanks for everyone's time.
> I'd appreciate any feedback.
>
> Andy Singh, CCIE #6821, CCNP, CCDP.
> Network Engineer, Slam Dunk Networks
> 650-632-5568
> www.slamdunknetworks.com
> **Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:55 GMT-3