Which MPLS design attribute can you use to provide Internet access to a major customer through a separate dedicated VPN?

By assigning the customer's Internet access VPN VRF and the Internet gateway's VRF to the same Route Targets (RTs), the Internet routes can be exported from the Internet VRF and imported into the customer's VPN VRF. This allows the customer's dedicated VPN to receive and use the Internet routing table for forwarding Internet-bound traffic.

The Internet gateway typically inserts its connected or learned Internet routes into its own VRF, which are then exported via RTs, rather than directly into the customer's VPN without RT matching.

Connecting the Internet gateway router as a PE router is a standard setup, but it does not, by itself, explain the specific mechanism for providing Internet access to a *separate dedicated VPN* without involving RTs.

While a CE router supporting VRF-Lite and the full BGP routing table can be part of the solution, the core MPLS design attribute for sharing Internet routes between VPNs on the PE router is the use of Route Targets, not primarily a CE router feature.