Currently we lease fiber for a remote branch from our ISP. The link is a gigabit connection and we use cisco ASAs on each side to encrypt the data between. The ISP uses Q tagging to route my data from the main building to the branch. I am wanting to remove our layer3 devices and push VLANs to the remote branch. I need some way to encrypt the data layer2. Does anyone know of a low cost solution for this. I have seen many layer2 encryption boxes but they are expensive. Anyone have any ideas?