A network, method, and a method of providing a service for packet inspection and forwarding using multi-protocol label switching for a virtual private network in a public network. The network includes a first router, the first router being a provider edge multi-protocol label switching capable router, the first router including a firewall service module for inspection of packets, the firewall service module connected to one or more virtual private networks; one or more second routers, each second router of the one or more second routers being provider edge multi-protocol label switching capable routers, each second router connected to a private virtual network of the one or more virtual private networks; and a network connecting the first router to the one or more second routers.