Various embodiments establish a virtual private network (VPN) between a remote network and a private network. In one embodiment, a first system in the remote network establishes a connection with a central system through a public network. The central system is situated between the first system and a second system in the private network. The first system receives, from the central system and based on establishing the connection, a set of VPN information associated with at least the second system. The first system disconnects from the central system and establishes a VPN directly with the second system through the public network based on the set of VPN information.

Various embodiments establish a virtual private network (VPN) between a remote network and a private network. In one embodiment, a first system in the remote network establishes a connection with a central system through a public network. The central system is situated between the first system and a second system in the private network. The first system receives, from the central system and based on establishing the connection, a set of VPN information associated with at least the second system. The first system disconnects from the central system and establishes a VPN directly with the second system through the public network based on the set of VPN information.

Methods and apparatuses for a 5G System (5GS) (20) support Dynamic VLAN configuration for a logical Ethernet bridge (24) provided by the 5GS. In at least one embodiment, a User Plane Function (UPF) (22) runs, on a conditional basis, for example, Multiple VLAN Registration Protocol (MVRP) for a User Equipment (UE) (12) establishing or modifying an Ethernet Protocol Data Unit (PDU) session. Running MVRP allows the UPF to learn the VLAN's associated with the UE and correspondingly dynamically configure bridging services. In one or more embodiments. UEs that act as trunk ports are assigned a predefined VLAN ID, e.g., via an Application Function (AF) (32), and, for a UE establishing or modifying a session, a Session Management Function (SMF) (26) indicates the predefined VLAN ID to the UPF, triggering the UPF to run MVRP for the UE.