virtual private network in mpls is a data plane separation achieved by the control
plane by an inner service label advertised (and understood) only between
the pe routers involved within the vpn. no encryption happens at all.
the following kind of vpns are already available:
virtual private lan service
any transport over mpls
carrier supporting carrier
layer3 mpls vpn