The present disclosure is directed to supporting multiple virtual LANs (VLANs) via a single tunnel between intermediary devices. A first intermediary device of a first data center on a first network receives, from a second intermediary device of a second data center on a second network, an encapsulated packet via a tunnel established between the first intermediary device and the second intermediary device. The first intermediary device comprising a plurality of network interfaces, each corresponding to a virtual LAN (VLAN) network of a plurality of VLAN networks. The first intermediary device detects that the encapsulated packet has been tagged with virtual LAN (VLAN) information by the second intermediary device identifies a VLAN network of the plurality of VLAN networks and transmits a packet of the encapsulated packet via the network interface corresponding to the identified VLAN network.