A Universal Virtual Private Network (VPN) apparatus, and method and system for using universal VPNs. The Universal VPNs include a first Internet Protocol (IP) switch connected to a second IP switch by a public telecommunications medium. Each IP switch has an interswitch port and access ports to which hosts are directly connected. A virtual private line services (VPLS) packet received by the first IP switch from a source host directly connected to an access port of the first IP switch is routed by the first IP switch to destination hosts of a universal VPN attached to access ports of the first and second IP switches via respective transmission paths that use a VPLS transmission protocol throughout each respective transmission path. The VPLS packet includes a header appended to an IP frame including a packet payload including a first message, the header including a VPN label identifying the universal VPN.