Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a VPN over ipsec established between 2 sites (site 1 and site 2) with Cisco 871.

Please see my network diagram :

I created vlan on my 3com switches. Now, I would like to keep VLAN's between site 1 and site 2.

If I am vlan1/site1, after the VPN, I will be always in the vlan1/site2 and vlan2/site1 -> vlan2/site2.

Is it possible ?

I'm looking for something like that on google, and I find : "dot1q tunneling"

share|improve this question
You can encapsulate VLANs inside traffic destined for another VLAN. The keyword here is QinQ. But I'm not sure that's what you mean. – Tom O'Connor Dec 6 '11 at 0:13

As far as I know, VLANs are a concept that is local to a switch. In consequence the VLANs on site1 are always completely independent from the VLANs on site2.

share|improve this answer
+1. VLAN are ETHERNET level, which has no correspondence in IP - so they do not go over VPN. – TomTom Aug 4 '10 at 11:29

I think this is still possible with OpenVPN, if you use TAP connectivity.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.