Sharoz, Extreme EXOS hardware is primarily a layer 2 switch with a lot of layer 3 possibilities and protocols supported. Typically most VPNS are between Site A and Site B and because they are across other folks networks you exchange keys and encrypt the date thus creating a secure VPN. Depends on what you are trying to do and use an Extreme product to in your network service model.. We are a large Metro Ethernet carrier with 1800 plus Extreme switches servicing MEF servie for all sorts of customers... We only use layer 2 vlans and QnQ vmans in all our Extreme switches. Of course we are only the transport connecting everyone and our job is not to change their packets or data but to get it from A to B, intact, in order, and with minimal jitter and latency so we don't provsion any VPN's.. We just encapsulate them and transport them...