The XSR Routers have been discontinued and are no longer officially supported. I don't know of any features with native vpn protocols built into the code like ipsec on the product line, but I don't know the purple side very well.
As I know in EXOS switches you can use L3-GRE and L2/L3-VPNs based on MPLS/VPLS network, also you can use VMAN (Q-in-Q) to make L2 tunnel through L3 network.
Maybe colleagues will correct me or add something...