A communication system includes: a first forwarding apparatus located at an end point of a network, a second forwarding apparatus located at an end point of the network, and a control apparatus that constructs a virtual network by controlling the first and second forwarding apparatuses. The control apparatus sets in the first forwarding apparatus, a first processing rule such that, when the first forwarding apparatus receives a packet into which is inserted a first tag including an identifier for identifying the virtual network, the first forwarding apparatus inserts a second tag into the received packet and sends the received packet from a prescribed port. The control apparatus sets, in the second forwarding apparatus, a second processing rule such that, when the second forwarding apparatus receives the packet into which is inserted the second tag, the second forwarding apparatus removes the second tag and sends from a prescribed port.