Quick Answer

The correct order ends with the egress PE forwarding the IP packet to the destination CE, making that the final step in MPLS L3VPN packet forwarding. This sequence is driven by the need to first impose both an inner VPN label and an outer MPLS label at the ingress PE after a VRF lookup, then switch the outer label across the core via P routers, and finally pop the outer label at the egress PE to expose the inner VPN label for the final IP forwarding decision. On the ENCOR 350-401 exam, this drag-and-drop task tests your understanding of the label imposition, swapping, and disposition process, with a common trap being the misplacement of the P router’s label swap before the egress PE’s pop. A reliable memory tip is to think “impose, swap, pop, forward”—the ingress imposes two labels, the core swaps the outer, the egress pops the outer and reads the inner, then forwards the IP packet to the destination CE.