How to configure VLAN VPN on L2 Managed switches using the old GUI

T2700G-28TQ , TL-SG5412F , TL-SL5428E , TL-SG5428 , T3700G-28TQ
Recent updates may have expanded access to feature(s) discussed in this FAQ. Visit your product's support page, select the correct hardware version for your device and check either the Datasheet or the firmware section for the latest improvements added to your product.
VLAN-VPN (Virtual Private Network) function, the implement of a simple and flexible Layer 2 VPN technology, allows the packets with VLAN tags of private networks to be encapsulated with VLAN tags of public networks at the network access terminal of the Internet Service Provider. And these packets will be transmitted with double-tag across the public networks.
Now let´s learn how to configure the VLAN VPN on L2/L3 Managed Switches by the following example:
Network Topology:
As we can see,VLAN 2 is the private network while VLAN 20 is the public network, we are going to achieve the purpose that two Terminals can communicate with each other. The Provider Edge(T-3700G) encapsulate the private network’s datagram with outer layer tag and packets transmitted with double tags in Public Network.
Here we take T-3700G and TL-SL3428 as an example.
The connection of Side A is like the following and the Side B is the same as Side A,here we take Side A as an example to config:
Configuration on TL-SL3428:
- Create VLAN 2 contains port 3 tagged and port 8 untagged.
2. Set the Link type of port 3 as General and port 8 as Access. The pvid is 2.
Configuration on T-3700G:
- Create VLAN 2 contains port 3 tagged and VLAN 20 contains port 3 untagged and port 8 tagged.
2. Set the Link type of port 3 and port 8 as General. The pvid is 20.
3. Enable the VLAN VPN mode and select port 8 as Up-link port.
4.Select the port 3 and enable it.
Configuration of side B is the same as this side A.
Now, the network will work as described Purpose.
Is this faq useful?
Your feedback helps improve this site.
What’s your concern with this article?
- Dissatisfied with product
- Too Complicated
- Confusing Title
- Does not apply to me
- Too Vague
- Other
Thank you
We appreciate your feedback.
Click here to contact TP-Link technical support.

TP-Link Community
Still need help? Search for answers, ask questions, and get help from TP-Link experts and other users around the world.
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy .
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy .
Basic Cookies
These cookies are necessary for the website to function and cannot be deactivated in your systems.
TP-Link
SESSION, JSESSIONID, accepted_local_switcher, tp_privacy_base, tp_privacy_marketing, tp_smb-select-product_scence, tp_smb-select-product_scenceSimple, tp_smb-select-product_userChoice, tp_smb-select-product_userChoiceSimple, tp_smb-select-product_userInfo, tp_smb-select-product_userInfoSimple, tp_top-banner, tp_popup-bottom, tp_popup-center, tp_popup-right-middle, tp_popup-right-bottom, tp_productCategoryType
Youtube
id, VISITOR_INFO1_LIVE, LOGIN_INFO, SIDCC, SAPISID, APISID, SSID, SID, YSC, __Secure-1PSID, __Secure-1PAPISID, __Secure-1PSIDCC, __Secure-3PSID, __Secure-3PAPISID, __Secure-3PSIDCC, 1P_JAR, AEC, NID, OTZ
Zendesk
OptanonConsent, __cf_bm, __cfruid, _cfuvid, _help_center_session, _pendo___sg__.<container-id>, _pendo_meta.<container-id>, _pendo_visitorId.<container-id>, _zendesk_authenticated, _zendesk_cookie, _zendesk_session, _zendesk_shared_session, ajs_anonymous_id, cf_clearance
Analysis and Marketing Cookies
Analysis cookies enable us to analyze your activities on our website in order to improve and adapt the functionality of our website.
The marketing cookies can be set through our website by our advertising partners in order to create a profile of your interests and to show you relevant advertisements on other websites.
Google Analytics & Google Tag Manager
_gid, _ga_<container-id>, _ga, _gat_gtag_<container-id>
Google Ads & DoubleClick
test_cookie, _gcl_au