I have OSPF and MPLS enabled in network and run xconnects to transmit L2 traffic. But also have just Internet clients that want public IP addresses. So I configure public IP on interface towards client. Problem is that all is global routing table, so clients can access IPs from core local ISP network.
How to improve it by design? that client's with public IP can't acccess core IPs. As I understand I should create VRF "Internet" and what next? BGP MP-BGP is needed?
PE -- client is always static IP, no IGP here.