Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a VPN over ipsec established between 2 sites (site 1 and site 2) with Cisco 871.

Please see my network diagram : http://img806.imageshack.us/img806/9821/img007.jpg

I created vlan on my 3com switches. Now, I would like to keep VLAN's between site 1 and site 2.

If I am vlan1/site1, after the VPN, I will be always in the vlan1/site2 and vlan2/site1 -> vlan2/site2.

Is it possible ?

I'm looking for something like that on google, and I find : "dot1q tunneling"

share|improve this question
    
You can encapsulate VLANs inside traffic destined for another VLAN. The keyword here is QinQ. But I'm not sure that's what you mean. –  Tom O'Connor Dec 6 '11 at 0:13
add comment

2 Answers

As far as I know, VLANs are a concept that is local to a switch. In consequence the VLANs on site1 are always completely independent from the VLANs on site2.

share|improve this answer
1  
+1. VLAN are ETHERNET level, which has no correspondence in IP - so they do not go over VPN. –  TomTom Aug 4 '10 at 11:29
add comment

I think this is still possible with OpenVPN, if you use TAP connectivity.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.