MPLS-TE (MPLS Traffic Engineering)

Also known as: MPLS Traffic Engineering

MPLS-TE (RFC 3209, RFC 5305) uses RSVP-TE or IS-IS/OSPF extensions to establish explicit-path label-switched paths that reserve bandwidth and steer traffic away from the shortest IGP path. Widely deployed on operator backbones and IPX transport to enforce SLAs on signaling, S1-U/N3 backhaul, and interconnect flows.

Categories: Radio Access NetworkRoaming and InterconnectInternet and Routing

MPLS-TE in context

The radio access network is where mobile devices attach to the operator's infrastructure. Attacks in this layer include IMSI catching, rogue base stations and downgrade attacks; defenses rest on mutual authentication, integrity-protected signaling and Open RAN supply-chain hygiene.

Roaming and interconnect are where two operators exchange signaling and user-plane traffic. Trust boundaries here are the primary attack surface for location tracking, SMS interception and fraud, which is why GSMA now mandates SEPP with PRINS on 5G interconnect.

To place MPLS-TE in the wider telecom-security picture, review TrGW, Grey Routing, Inter-PLMN Security, mTLS, AUSF and MNC: each entry cross-references back to this page so you can walk the topic in either direction.

Related terms

Related topic hubs

  • Roaming Security IPX/GRX interconnect risk, home-routed vs local-breakout, SEPP.
  • Diameter Security 4G/LTE Diameter threats across IPX/roaming and DEA defenses.
  • GTP Security GTP-C/GTP-U threats across S5/S8, N3/N9 and GRX/IPX borders under GSMA FS.20.
  • Signaling Firewall Unified SS7/Diameter/GTP/SMS signaling firewall framework.

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.