hey,
If you are using a private MPLS (I.e. Not over Internet) & have Cisco CE routers consider GETVPN.
There is no reason why you can't use GETVPN inside L3VPN. This is exactly one use case for GETVPN and many people are using it successfully.
If you don't trust your provider at all, encrypting in CPE doesn't fly and you need separate routers. It's still good protection against traffic interception by 3rd party.
-- tarko _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/