MPLS scenario for enterprise/banks

Question

Dear All,
I know mpls is good for SPs but how can we implement and justify mpls for an enterprise/banks with branches over 1k.
Is there any existing "private" mpls based enterprise network implemented for such a scenario and how is it justified besides using fast switching which cef can also achieve.

Answer 1

HI, [Pls Rate if HELPS]
Justify the MPLS VPN as scenario:
VPN services can be offered based on two major models:
Overlay VPNs, in which the service provider provides virtual point-to-point links between customer sites
Peer-to-peer VPNs, in which the service provider participates in the customer routing
About Overlay VPN's:
=====================
VPN is implemented with IP-over-IP tunnels:
Tunnels are established with GRE or IPSec.
GRE is simpler (and quicker); IPSec provides authentication and security.
VPN is implemented with PPP-over-IP tunnels.
Usually used in access environments (dialup, digital subscriber line).
Service provider infrastructure appears as point-to-point links to customer routes.
Routing protocols run directly between customer routers.
Service provider does not see customer routes and is responsible only for providing point-to-point transport of customer data.
About Peer to Peer VPN's:
===========================
The only difference is: Here the Service Provider participates in the Customer Routing. PE Router exchanges Customer routers through the core network.
How to treat VPN's:
=====================
Here you need to consider every branch router as CE ie., Spoke Router but not the application itself. If the application are hosted only @ HO means access will be easy.
If the applications are hosted @ various offices using of RD & RT Values in MPLS-VPN will help a lot in implementation.
How to Implement:
==================
You can implement using pure MPLS-VPN Services. The HUB can be implented and all SPoke are treated as CE Routers. The IPSec session are to be established as said before.
The SP will implement the VRF with FRD & RT Values. The same will be imported @ spoke locations to access the Servers @ HO.
Hope I am Informative.
PLS RATE if HELPS
Best Regards,
Guru Prasad R