A method implemented in an access node (AN) including receiving a packet for a service on a connection between a subscriber and a service provider or service provider network (SP), replacing a Virtual Local Area Network (VLAN) tag for the subscriber in the packet with a Q-in-Q label that matches a Media Access Control (MAC) address for a residential gateway (RG) in the packet when the packet is received from the RG, wherein the Q-in-Q label comprises a Customer VLAN (C-VLAN) tag that identifies the subscriber and a Service-VLAN (S-VLAN) tag that identifies the SP, and replacing the Q-in-Q label in the packet with a VLAN tag for the subscriber that matches the MAC address for the RG in the packet when the packet is received from the SP.