How to Configure Layer 2 SpeedFusion VPN


SpeedFusion and PepVPN can operate in layer 2 mode, bridging both ends of a VPN to create a single Ethernet LAN. This allows you to extend your local network and easily run applications that are LAN-only or difficult to route, such as:

  • Zeroconf / Bonjour
  • AirPlay
  • AirPrint
  • Windows printer and file sharing network discovery

To use this feature, navigate to Network > Network Settings and select the interface you wish to bridge

Under Network Settings, click the Question mark button to define layer-2 bridging

Click the drop-down menu, and a list of your PepVPN profiles will appear. Select the profile you wish to bridge to

Press the Save button on the bottom, and then the Apply Changes button on the top right hand corner to implement your changes.

LAN Expansion/Bridging MAX HD2
NAT mode for PEPVPN (SOTG)
Layer 2 Bridge w/Balance 380 + MAX HD2
DHCP - DHCP Relay - Address reservation
580 in lan port can make trunk?
Point to Point connection on same subnet

Hi, does anyone know how many vlan can be passed through 1 tunel speed fusion?


@Rene_Ovando as many as you like in theory. A L2 Speedfusion/PepVPN tunnel acts as a transparent bridge so the number of VLANs passed over it should be immaterial.


I’m running firmware 7.0.2 on both my balance 20 and BR1 slim.
I have trouble finding the L2 SpeedFusion options under Network > Network Settings.
Am I looking at the wrong place?


Oops, just found the option. It is hidden under the ‘?’ help icon for multi VLAN config.


Hi Peplink team,

Last night, I have successfully deployed a Balance 20 in my customer’s office.
My customer is a builder running his own building company in TownHall Sydney.

I offer him the VPN solution using the BR1 Slim to bridge to his office network. I was able to setup the L2 bridging over PepVPN. Exactly as you guys mentioned, the performance is a big issue when using L2 bridging, since all traffic from the BR1 (over 4G) seems to have tunnelled through to the office network. The broadband infrastructure in Australia in general is still pretty slow especially the uplink speed of ADSL2 which is still widely used our country. The uplink speed of my customer’s broadband is only 0.5Mbps, and therefore the performance of the L2 VPN is pretty pathetic, but usable at least.

I was wondering if the AC mini firmware is capable of setting up VPN over L2? Cos I’m trying to help my customer to bridge the VPN connectivity from his home using the AC mini. Thanks for advice in advance.




I’m currently doing some tests with the L2 functionallity and stumbled onto a problem. I want to forward a trunk of 4 VLAN’s to 2 remote Transit routers. I added VLAN 100 to my balance 1350 bridged it to the pepvpn/sf profile, everything works fine and then I tried to add a 2nd VLAN (101) and bridge it to same pepvpn profile and I get the error that this profile is already bridged to another vlan…

From the tests I’ve done and the comment from Martin I conclude that you can actually send a trunk trough the
L2 VLAN, but only by using it as a dumb unmanaged switch (i.e. creating an access port with the pepvpn vlan and then connect the trunk to it on both sides). This seems a dirty method because I already have the vlan’s accessible trough the regular LAN trunk connected to the balance…
Is this the right conclusion or am I overlooking something (I checked all the question marks for clues ;-))?

I also have a suggestion/feature request for the L2 VPN, is there a possibility to implement IGMPv3 on it?
As a broadcaster we use multicast video quite often and now it’s dangerous to use as the stream is send
to all VPN clients.

Best Regards,


split this topic #8

A post was split to a new topic: WAN Jumbo Frame