In an MPLS VPN, which router type imposes and removes VPN labels at the edge?

The PE (Provider Edge) router is responsible for imposing and removing VPN labels in an MPLS VPN. It sits at the edge of the service provider network and connects to the customer's CE (Customer Edge) router. The PE router maintains VPN routing and forwarding (VRF) tables for each connected VPN, associating customer routes with specific VPN labels. When traffic enters the MPLS network from a CE router, the PE router adds a VPN label (inner label) and an MPLS transport label (outer label). When traffic exits the MPLS network towards a CE router, the PE router removes these labels and forwards the IP packet. CE routers are customer-owned and are unaware of MPLS or VPN labels. P (Provider) routers, also known as core routers, are backbone routers within the service provider's MPLS network that forward packets based solely on the outer MPLS transport label, without inspecting the inner VPN label or IP header.