While managed MPLS VPN networks provide cost effective and flexible alternative to dedicated high-fiber optic networks, many MPLS customers underestimate the threats to provider networks and physical infrastructure that these circuits rely on. But as we hear about major breaches in the media, the likelihood of an attack is very real.

This report explores security considerations for service provider MPLS VPN, and describes two threat scenarios against a real MPLS VPN environment that was constructed to demonstrate the typical attack surface of an MPLS Layer 3 VPN provider network.