I'm working with a vendor that is helping us convert our p2p circuits to mpls for seven of our offices. Our CE routers are 2911's. They're handing off 10.5m ethernet to us. The vendor is suggesting that we cable it like this ISP MPLS > 2960 > 2911 RoaS, and then connect all other access switches to the 2960. Would it make more sense to do ISP MPLS > 2911 > 2960 > access switches? The 2960 that they want to connect directly to mpls device will have our phones on it and just doesnt feel right to me, Im so used to a security device at the perimeter. Then again this is my first mpls network. Thoughts?