A method of providing a virtual private network (VPN) service through a shared network infrastructure comprising a plurality of interconnected provider edge (PE) devices having customer edge (CE) interfaces, wherein some of the CE interfaces are allocated to a VPN supporting a plurality of virtual local area networks (VLANs) and are arranged for exchanging traffic data units with respective CE devices, each traffic data unit including a VLAN identifier, the method comprising the step of:
- establishing at least one virtual connection in the shared network infrastructure between two CE interfaces allocated to said VPN, for forwarding traffic data units including a respective VLAN identifier,
- wherein said virtual connection (VC) has an identifier determined from said VLAN identifier and an identifier of said VPN.