Comparing BGP/MPLS and IPSec VPNs

Network managers have many options for site-to-site connectivity. Traditional leased lines, Frame Relay, and ATM based connectivity solutions are giving way to newer VPN technology. Two types of modern VPNs, BGP/MPLS and IPSec are becoming increasingly attractive to network managers. This paper gives an overview of MPLS and then discusses the mechanisms used to provide VPNs based upon BGP/MPLS and IPSec. The paper assesses the security provided by both solutions and suggests guidelines for network managers to assist in evaluating these two options.