An IP network can be divided into virtual private networks (VPNs), which are logically isolated. VPN-based service isolation can be used on networks to allow interconnection between departments in an enterprise or to carry new services. Therefore, VPNs are widely used on live networks. Each VPN configured on a router carries only a single type of service. The virtual system (VS) technique can be used to implement multi-service VPNs on the same router to meet growing service needs.
In Figure 1, each VS carries a specific type of VPN service, and various types of VPN services are isolated from one another. MPLS and BGP can run on VSs in the same physical system (PS).