Securing an MPLS network

RouterOS Forwarding Protocols
1

Hi Guys

So i’ve got my wireless MPLS network working and would like to secure it for a corporate customer that needs voice/data

I do not use wireless encryption on the highsites so I am looking at alternative methods. Which option is the best?

Option1)
A) create a VRF from the customer’s CPE (part of the MPLS cloud) to a core router in our NOC
B)run an IPSEC or PPTP tunnel across the VRF
C) route the voice traffic over the tunnel

Option2)
Same as 1 but no VRF

Option3)
Same as 1 but no tunnel

Option4)
Any other ideas?

thanks

2

of course, use encrypted tunnel. over VRF or not - it depends on a hop count, I think. is there a sense to enter MPLS cloud and then exit?

3

thanks, but why would the hop count be relevant?

Yes the data would need to enter and exit the mpls cloud…the MPLS would be the wireless network