In addition to discovering MPLS core devices and traditional Customer Edge (CE) devices, MPLS Manager discovers multi-VRF CEs. These devices maintain VRF tables for the purpose of extending the privacy and security of an MPLS L3VPN from the PE device to the branch office.

In A multi-VRF CE device deployment that serves five clients, for example, the multi-VRF CE maintains five VRF tables in order to provide five client organizations with their own IP address space.

Figure 1. A multi-VRF CE device deployment that serves five clients

The PE that is connected to the multi-VRF CE maintains five VRFs that are related to the five VRFs that the multi-VRF CE maintains. The use of a T1 line with multiple point-to-point subinterfaces enables traffic between the multi-VRF CE and the PE to be segmented into separate VRFs.

No MPLS label exchange, no LDP adjacency, and no labeled packet flow occur between a multi-VRF CE and a PE. The packets flow as IP packets between the two devices.