This document presents an framework for secure layer 3 Virtual Private Networks (VPNs) for customer networks that exchange encrypted information through a service provider network. It also describes the necessary interactions between the various functions (e.g. routing and encryption) at the VPN boundary to construct the secure VPN.