IPSEC, MPLS and Ethernet WAN

IPSec, MPLS and Ethernet WAN are three approaches to site connectivity. IPSec sets up encrypted tunnels over the public Internet and is inexpensive but latency-prone and demanding to manage. MPLS is a carrier-managed private network with guaranteed SLAs and classes of service. Ethernet WAN connects sites at Layer 2 and gives the company more control at high bandwidths. Which approach fits depends on the number of sites, bandwidth, latency needs and in-house IT expertise.

Migrating from IPSec to MPLS pays off when a historically grown network is slowed down by low QoS, unfulfillable SLAs, high latencies and complex firewall management. Instead of managing many local carriers individually, a one-carrier strategy consolidates the network and simplifies operations considerably. The result is cost savings, less internal support effort and higher security. For companies without a large in-house network team, a managed MPLS is often the more sensible foundation.

Ethernet WAN is usually the better choice when a company has a strong in-house IT department, high bandwidth requirements and latency-critical applications. The Layer 2 design lowers costs and gives more control over the network. Companies that want to manage the network and possibly several carriers abroad themselves benefit from the flexibility. MPLS, by contrast, remains the good all-round solution when the network should be fully managed and bandwidth and latency are less critical.

An IP VPN is a virtual private network based on a shared IP backbone of a telecommunications provider. It typically uses MPLS technology and enables companies to achieve secure and cost-efficient site connectivity without their own physical lines. Traffic remains logically separated from other customers and can be prioritized using classes of service. This lets an IP VPN connect multiple sites predictably and securely, without the company having to operate its own lines.

A one-carrier strategy reduces complexity considerably. Instead of coordinating many local providers with different SLAs and contacts, everything runs through one partner with consistent service levels. This lowers internal support effort, improves SLA enforceability and increases security through a consistent design. Billing and monitoring also become easier. SAVECALL compares more than 80 carriers neutrally to find the combination with the best price-performance ratio.

It depends on the number of sites, countries, bandwidth and flexibility needs and your in-house network expertise. If the network should be fully managed, foreign sites do not need very high bandwidth and latency is uncritical, MPLS is a good all-round solution. With strong in-house IT, high bandwidth and latency-critical applications, Ethernet WAN is the better fit. SAVECALL assesses your situation neutrally and plans the right migration path with a focus on manageability, cost and SLAs.