Configuration of a private network segment

A system comprising:

• an IP-routed interregional distribution network;
• and
• two or more IP-routed regional distribution networks that:
• map IP packets from the distribution network to and from the interregional distribution network, and
• route IP packets to and from respective user-network interfaces (UNIs);
• and
• where each user-network interface (UNI) utilizes:
• (a) a virtual extensible local area network (VXLAN),
• (b) a first virtual broadcast domain (VBD) within a first distribution zone of a regional distribution network,
• (c) a second virtual broadcast domain (VBD) within a second distribution zone of the regional distribution network, and
• (d) a protocol transformation stack,
• wherein said UNIs are adapted for layer 2 connection to a user device via said first VBD, and adapted for layer 3 communication over its respective IP-routed regional distribution network via said VXLAN, and
• wherein said protocol transformation stack is adapted to convert a layer 2 broadcast domain to/from an IP-routable form by mapping said first VBD to said second VBD, and encapsulating said second VBD into said VXLAN.