Inter-AS and intra-AS solutions
Layer 2 and Layer 3 services can be configured in a single area or across multiple areas or ASs. Most deployments use Option A and Option C, though some also use Option B. ANYsec service encryption supports only Option A.
The following figure shows an example of an encrypted service with Option A.
In the scenario shown above, the service is decrypted at the ASBR or ABR PE, after which routes are leaked to the corresponding ASBR or ABR PE in the other domain. Traffic is forwarded in clear text, and in the second domain the PE can re-encrypt the service. The user data is in clear text between the ASBR and ABR, and between the edge PEs.