Provisioning a virtual private network: a network design problem for multicommodity flow