How to transfer vlan over l2tp?

Question

Mikrotik

Hey!
There is a task, to transfer on l2tp vlan.
Scribbled crookedly, as it should turn out.
There are no problems with how to create these vlans or how to forward l2tp.
We know, we can. Specifically for me, the difficulty is that each of these vlans must be connected (or maybe not) to the physical interface on the switch.
There was a need to "complicate" the network, for a strict separation of end customers, and of course, to improve security. The manuals that I came across either exclude the use of vpn, or simply contain too much "water" in themselves. I hope for constructive comments and the lack of answers from the category of "I found for you in Google." Thank you!

Answer 1

The first is to use BCP technology, which allows you to encapsulate frames, including those with tags https://wiki.mikrotik.com/wiki/Manual:BCP_bridging...
The second is to raise an EoIP tunnel inside an existing l2tp tunnel, but let's say this is not the best move , maybe simple.
The third is to use MPLS and raise VPLS tunnels, which are all right to drive.
The fourth is still the same MPLS and the same VPLS but already raise tunnels automatically based on the BGP community Route Distinguisher extension and import / export Route Target.
The fourth option is the most correct, you can organize redundancy by adding l2tp tunnels, and VPLS will be built according to the best if you specify a route in TE.
It also does not require additional settings, configure BGP and VPLS once and then simply register the id Route on the necessary routers