A method comprising: allocating an Internet Protocol, IP, address to a wireless device with a Multiprotocol Label Switching, MPLS, home service provider network (20, 124) having a mobile virtual private network, VPN, (18, 30, 56, 71) that defines routes that are distinct and separate from a default routing space of the home service provider network; dynamically extending the mobile VPN from the home service provider network to a visited service provider network when the wireless device attaches to an access network (14, 44) served by the visited service provider network to enable the wireless device to exchange network traffic with the visited service provider network using the IP address allocated by the home service provider network; receiving and installing, to a VPN routing and forwarding, VRF, instance associated with the mobile VPN within an autonomous system border router, ASBR, of the home service provider network, a route specifying a prefix for the IP address and an associated inter-autonomous system, inter-AS, MPLS label, wherein the ASBR receives the route from the visited service provider network; forwarding the route and a backbone MPLS label to a provider edge, PE, router of the home service provider network to dynamically extend the mobile VPN to visited service provider network; associating the backbone MPLS label with the inter-AS MPLS label; receiving, with the ASBR, a packet destined for the IP address that is encapsulated with the backbone MPLS label from the PE router; mapping the backbone MPLS label to the inter-AS MPLS label; encapsulating the packet within the inter-AS MPLS label; forwarding the encapsulated packet to a next hop specified by the route; and receiving, with the ASBR, a route target associated with the VRF instance from the visited service provider network; and sending routes installed to the VRF instance to the visited service provider network. allocating an Internet Protocol, IP, address to a wireless device with a Multiprotocol Label Switching, MPLS, home service provider network (20, 124) having a mobile virtual private network, VPN, (18, 30, 56, 71) that defines routes that are distinct and separate from a default routing space of the home service provider network; dynamically extending the mobile VPN from the home service provider network to a visited service provider network when the wireless device attaches to an access network (14, 44) served by the visited service provider network to enable the wireless device to exchange network traffic with the visited service provider network using the IP address allocated by the home service provider network; receiving and installing, to a VPN routing and forwarding, VRF, instance associated with the mobile VPN within an autonomous system border router, ASBR, of the home service provider network, a route specifying a prefix for the IP address and an associated inter-autonomous system, inter-AS, MPLS label, wherein the ASBR receives the route from the visited service provider network; forwarding the route and a backbone MPLS label to a provider edge, PE, router of the home service provider network to dynamically extend the mobile VPN to visited service provider network; associating the backbone MPLS label with the inter-AS MPLS label; receiving, with the ASBR, a packet destined for the IP address that is encapsulated with the backbone MPLS label from the PE router; mapping the backbone MPLS label to the inter-AS MPLS label; encapsulating the packet within the inter-AS MPLS label; forwarding the encapsulated packet to a next hop specified by the route; and receiving, with the ASBR, a route target associated with the VRF instance from the visited service provider network; and sending routes installed to the VRF instance to the visited service provider network.