"MPLS VPN is the fastest and most secure VPN technology"

Tata Internet Services, which offers its services under the Tata Indicom
brand, is one of the few service providers in the country that is offering IP
VPN services in India. Prasoon Srivastava, GM (infrastructure solutions group),
TISL, spoke to Voice&Data on IP VPN and its benefits for corporates.
Excerpts:

Is IP VPN better than layer 2 VPN?

Layer-3 VPNs are known to us more as IP VPNs, and are rated high on scale of
flexibility. An IP-VPN link can be set up anywhere in the world between two end
points, with the network automatically handling the traffic routing.

Layer2 VPN is identified more with point to point circuits (permanent virtual
circuit in frame relay) and hence is considered relatively more secure with a
committed data throughput, both of which are present by virtue of these links
being point to point. However, Layer2 VPNs do not offer the flexibility offered
by Layer3 VPNs.

For most of service providers offering VPNs, both Layer2 and Layer3 are
important.

Are carrier networks in India fit for IP VPN?

Yes, and we are providing IPSec MPLS VPN services to mission-critical
customers in almost every vertical by using the infrastructure of long-distance
service providers.

How does MPLS facilitate IP-based VPNs?

IP MPLS VPN is the best mix of Layer 2 and Layer 3. MPLS VPNs is globally
acknowledged by many (including Cisco and Juniper) to be the most secure, fast
and next-generation VPN technology. One of the features in MPLS that contributes
to its speed and security is that there is a unique label (and hence cannot be
spoofed unlike IP header) for every packet transmitted. This label is checked
only at the service provider edge routers unlike IP header analysis happening at
every hop which made an IP VPN relatively less secure and also slower.

IPsec over MPLS would therefore offer layered security and is acknowledged by
many service providers worldwide to be the most secure VPN option in data
transmission today.

The potential customers for IPSec MPLS VPNs...

These would be mission- and business-critical networks like banking and
finance. In these verticals, flexibility is often compromised for more security.
This is why they opt for fixed point-to-point CUG networks. With the advent of
net banking and other Internet-based applications, the flexibility offered by IP
can no longer be ignored. We have been quite successful with our IPSec MPLS
offering. We have acquired VPN orders from large number of BFSI customers
including three well known banks in 2002 .In addition, we have acquired large
customer base for mission critical network deployments in other verticals like
manufacturing, process and retail, and media.

What are the advantages of IP VPN over frame relay or ATM?

One of the features in MPLS which contributes to its speed and security is
that in MPLS there is a unique label (hence cannot be spoofed unlike IP header)
for every packet transmitted. This label is checked only at the service provider
edge routers unlike IP header analysis happening at every hop which made an IP
VPN relatively less secure and also slower.

For integrated video, voice and data applications, the use of MPLS helps to
guarantee differential QoS (quality of service) levels for multi-service
deployments by way of packet prioritization/bandwidth reservation required by
voice/video. The use of IP for video, voice and data is a key enabler for easy
integration of voice/video calls into customer’s application thereby bringing
down the overall TCO for large and complex enterprise deployments.

Ravi Shekhar Pandey