I wanted to separated the subnetwork on my LAN. One of the VLAN e.g VLAN 2 will be joint other VPN (wide are network). For this time I do not want to invest on additional ethernet interface at the router and switch, I plan to configure encapsulation 802.1Q on my 7200 router unfortunately the LAN switch Cat 1900 do not support ISL/dot1Q trunking.