Standard VPNs

The traditional distinction between internal routes and external routes also applies to VPN routing architectures. As shown in Routers in a VPN, the provider (P) routers maintain only the service provider’s internal routes (to provider edge [PE] routers and other P routers); they do not maintain VPN routes. PE routers are the only devices in the provider network that are required to maintain external routes.

The BGP next hop connects the external routes to the internal routes in traditional VPNs: