Some Architecture Requirements
Per VPN routing and forwarding.
No routing/forwarding based on private addresses occurs in the backbone.
Any routing protocol can be used in the VPN domain and in the backbone.
Overlapping VPN addresses.
Not limited to a single tunneling mechanism.
Accommodates different backbone deployment scenarios.
Different levels of data and routing security.
Not limited to a single backbone technology (backbone independence).