A packet node and corresponding methods are provided for providing services to packets received at the packet node. At an ingress card, a packet is classified and a virtual media access control (VMAC) address is attached to the packet. The VMAC address identifies a service component for providing a service to the packet. Layer two switching of the packet is made within the packet node, based on the VMAC address. After processing of the packet by the service component, a new VMAC address is attached to the packet. Further layer two switching of the packet, based on the new VMAC address, may lead to further processing by another service component or to forwarding of the packet beyond the packet node.