[c-nsp] VPN Exchange

[harbor235]

I wanted to start a discussion around the design of a "VPN Exchange" in a
MPLS environment. For a particular organization that may possess numerous
L3VPNs is there a standard design practice for inter VPN traffic flows?
Obviously any such exchange would be a natural security enforcement point
as well as other network services ( Internet, security, DMZ, IDS/IDP, etc
......) given that each VPN may have their own security requirements,
preferences etc .....


Is anyone doing this now?



thanks,


Mike