We have a dark fibre connection between out two buildings. We are carrying some vlans from main site to remote site. One of these Vlans is critical and our security guy wants us to encrypt this vlan.

How can i achieve this goal? Can i use Gre for tunneling and then encrypt it? or any other idea?