This object implements transparent LAN service (TLS) by using a S-Tag (Service Provider tag) to tunnel the customer traffic over a service provider network. The CPE can operate in normal or S-Tag mode. In normal mode, CPE device operates according to the IEEE 802.1Q or 802.1D specifications. In S-TAG mode, the CPE device operates as follows: 1) The CPE's TPID (tag protocol ID) must be provisioned. 2) A S-Tag frame consists of a VLAN ID and a TPID that matches the CPE's provisioned TPID. 3) When the CPE adds a S-TAG, the S-Tag's VLAN ID will be taken from the CPE's default PVID and the TPID will be taken from the CPE's provisioned TPID. 4) The CPE device supports a TLS-Bridge. The ports on this bridge can be either S-TAG or TLS members. S-Tag port - The input frames from the service provider port may or may not have a S-TAG. The CPE will compare the tagged frame's TPID against the provisioned S-TAG TPID. If there is a match, the CPE will bridge the frame based on the VLAN ID in the S-Tag. If there is not a match, the frame is forwarded to the CPU. TLS port - The CPE will add a S-Tag to all input frames from this port regardless of whether the frames have a 802.1Q tag or not. The CPE will bridge the frames based on the VLAN ID in the S-Tag. Only a VLAN-tagged or untagged frames are expected from the ingress of a TLS (customer) port.