A method performed by an optical node, operating as a first network edge device of an optical layer one virtual private network (L1VPN), includes generating, by a first module of the optical node, a first optical data frame, where the first optical data frame includes an L1VPN overhead, and where the L1VPN overhead includes a control plane communication field; generating, by a second module of the optical node, a first control plane message for a second network edge device of the optical L1VPN, where the second network edge device is connected to the first network edge device across a provider network via an optical L1VPN link; incorporating, by the first module, the first control plane message into the control plane communication field of the first optical data frame; and transmitting, by the first module, the first optical data frame to the second network edge device via the optical L1VPN link.