IPSec-to-MPLS VPN mapping

Does anyone have some advice on implementing an ipsec to mpls vpn solution? I am attempting to create a solution where an offnet customer of the ISP I work for can use an ipsec vpn to connect and map to their own mpls vpn instance within our network.

Cisco has a solution for this, but it uses the Cisco IP Solution Center rather than the CLI.

I am looking for the equivalent CLI version.

Any comments from someone who has implemented this scenario either with or without the ISC would be appreciated.

Find more posts tagged with

SAVE $250 on Your Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View Boot Camps

Comments

mikej412

The VRF Aware IPSec doc may be what you want.

mwgood

mikej412 wrote:

The VRF Aware IPSec doc may be what you want.

Excellent! That is exactly what I'm looking for.

This document may take some adapting since it discusses terminating the IPsec tunnel on a PE, whereas I'm thinking of implementing Cisco's "two-box" solution with a multi-vrf CE instead of using one of our PEs to terminate the VPN. It should be doable though, thanks.