An Ethernet Metropolitan Area Network provides connectivity to one or more customer premises to packet-bases services, such as ATM, Frame Relay, or IP while advantageously providing a mechanism for assuring security and regulation of customer traffic. Upon receipt of each customer-generated information frame, an ingress Multi-Service Platform (MSP) “tags” the frame with a customer descriptor that specifically identifies the recipient customer. In practice, the MSP tags each frame by overwriting the Virtual Local Area Network (VLAN) identifier with the routing descriptor. Using the customer descriptor in each frame, a recipient Provider Edge Router (PER) or ATM switch can map the information as appropriate to direct the information to the specific customer. In addition, the customer descriptor may also include Quality of Service (QoS) allowing the recipient Provider Edge Router (PER) or ATM switch to vary the QoS level accordingly.