virtual private network in mpls is a data plane separation achieved by the control plane by an inner service label advertised (and understood) only between the pe routers involved within the vpn. no encryption happens at all. the following kind of vpns are already available:
ethernet vpn
hierarchical vpls
virtual private lan service
any transport over mpls
multicast vpn
inter-as vpn
carrier supporting carrier
layer3 mpls vpn