NGE provides the ability to encrypt MPLS services using key groups that are configured against these services. These services include:
VLL service (Epipe and Cpipe)
VPRN service using Layer 3 spoke SDP termination
IES service using Layer 3 spoke SDP termination
VPLS service using spoke and mesh SDPs
routed VPLS service into a VPRN or IES
MP-BGP-based VPRNs
L2oMPLSoGRE VLL service terminating on a WLAN-GW group interface
BGP-VPLS and BGP-VPWS using a PW template with auto-gre-sdp configured
NG-MVPN
For services that use SDPs, all tunnels may be either MPLS LSPs (RSVP-TE, LDP, or static LSP), or GRE or MPLSoUDP tunnels.
For MP-BGP services, resolving routes using spoke SDPs (spoke-sdp) or auto-bind SDPs (auto-bind-tunnel) is supported using LDP, GRE, RSVP-TE, or segment routing (SR-ISIS, SR-OSPF, or SR-TE).