You configure an L2 VPN service on a Tier-0 or Tier-1 gateway. To enable the L2 VPN service, you must first create an IPSec VPN service on the Tier-0 or Tier-1 gateway, if it does not exist yet. You then configure an L2 VPN tunnel between an L2 VPN server (destination gateway) and an L2 VPN client (source gateway).

To configure an L2 VPN service, use the information in the topics that follow in this section.