[c-nsp] MPLS VPN Running BGP w/ failover IPSec VPN Over Internet

[Ivan Pepelnjak]

Gert,

If I understood the original question correctly, he's an MPLS VPN customer running BGP with his Service Provider. Unless I'm mistaken, it's somewhat hard to run IGP on top of that, unless you build GRE or DMVPN tunnels over MPLS VPN first.

Ivan

> This is why I suggested to make this much more simple - treat all links,
> IPSEC and MPLS, as "AS internal" links, run an IGP over them, and let
> protocols handle end-to-end keepalive and failover that are built to do
> this.  One can do this with BGP, of course, but it tends to be less
> convenient/helpful in these scenarios.
> 
> gert