A method for forwarding data in a layer-2 network is provided. A first node receives a first data packet including a customer destination MAC address and customer data; generates a second data packet including a source virtual MAC address, a destination virtual MAC address and at least part of the first data packet. The at least part of the first data packet includes the customer destination MAC address and the customer data. The source virtual MAC address is a virtual MAC address assigned to the first node, and the destination virtual MAC address corresponds to the customer destination MAC address. The virtual MAC address assigned to the first node includes a first virtual MAC address segment with a first mask, which indicates a virtual MAC address space including virtual MAC addresses of child nodes of the first node. Then the first node forwards the second data packet.