How does an MPLS Layer 3 VPN function?

set of sites use multiprotocol BGP at the customer site for aggregation

multiple customer sites interconnect through service provider network to create secure tunnels between customer edge devices

set of sites interconnect privately over the Internet for security

multiple customer sites interconnect through a service provider network using customer edge to provider edge connectivity