Interconnecting virtual private networks

An apparatus comprising:

• a plurality of interfaces for communication with a map and encapsulate gateway and a customer edge device;
• and
• a processor for processing a packet received at a provider edge device in a first virtual private network, the packet destined for the customer edge device in communication with a second virtual private network, and transmitting the packet after encapsulation of the packet at the map and encapsulate gateway on a tunnel extending over said second virtual private network;
• wherein the map and encapsulate gateway maps the packet to the tunnel and encapsulates the packet for transport on the tunnel;
• wherein one or more services provided by said first virtual private network are not consistent with services provided by said second virtual private network and wherein said one or more services provided by said first virtual private network are tunneled over said second virtual private network.

Logic encoded on one or more non-transitory computer readable media for execution and when executed operable to:

• process a packet received at a data plane device in communication with a first virtual private network, the packet destined for a network device in communication with a second virtual private network;
• map the packet for transmittal on a tunnel that traverses over said second virtual private network based on a mapping database comprising control plane information for use in mapping and encapsulating the packet;
• and
• encapsulate the packet for transport on the tunnel;
• wherein services provided by said first virtual private network and not configured on said second virtual private network are tunneled over said second virtual private network.