hile providing status to order management enables growth with less than proportional increase in operating costs. 6.8.2 Orchestream Service Activator Service Activator is a product from Orchestream that supports metropolitan Ethernet services, IPSec-based VPN services and customer self-provisioning. Service Activator supports Layer 3 VPNs using multiprotocol label switching (MPLS), QoS and security management. The latest version also supports Layer 2 serv- ices using MPLS and virtual LANs (VLANs), Layer 3 services using IPSec and multi- network VPNs. This gives service providers a single platform on which to automate the management of a broad range of network features to deliver real-time services. Service Activator has several web interfaces and is equipped with a Java toolkit that network operators can use to create web portals to allow customer self- provisioning. Orchestream has ensured that Service Activator can be integrated seamlessly with InfoVista to deliver one-touch activation and assurance of VPN and other services. Many service providers embrace Ethernet as a technology that is suitable for met- ropolitan data services. Metropolitan (metro) Ethernet is cheaper to provide than traditional time division multiplexing (TDM) services. Importantly, the technology is familiar and robust, and is ideal for several common applications including the interconnection of Ethernet LANs to form metropolitan area networks (MANs). The two main network functions that need to be managed or activated to deliver VPN services are VLAN configuration and Layer 2 MPLS VPN management. Service Activator supports configuration of these features on a variety of network equip- ment. 23 Service Activator also supports the MPLS management frameworks in recent IETF draft proposals. IPSec VPNs use encrypted IP tunnels from site to site across an IP network. The addition of IPSec support lends more choice to service providers in which technol- ogy they will use to provide VPN services. Indeed, service providers can offer carrier-provis