up vote 2 down vote favorite
share [g+] share [fb]

I have a VPN over ipsec established between 2 sites (site 1 and site 2) with Cisco 871.

Please see my network diagram : http://img806.imageshack.us/img806/9821/img007.jpg

I created vlan on my 3com switches. Now, I would like to keep VLAN's between site 1 and site 2.

If I am vlan1/site1, after the VPN, I will be always in the vlan1/site2 and vlan2/site1 -> vlan2/site2.

Is it possible ?

I'm looking for something like that on google, and I find : "dot1q tunneling"

link|improve this question
You can encapsulate VLANs inside traffic destined for another VLAN. The keyword here is QinQ. But I'm not sure that's what you mean. – Tom O'Connor Dec 6 '11 at 0:13
feedback

2 Answers

up vote 2 down vote

As far as I know, VLANs are a concept that is local to a switch. In consequence the VLANs on site1 are always completely independent from the VLANs on site2.

link|improve this answer
1  
+1. VLAN are ETHERNET level, which has no correspondence in IP - so they do not go over VPN. – TomTom Aug 4 '10 at 11:29
feedback
up vote 0 down vote

I think this is still possible with OpenVPN, if you use TAP connectivity.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.