We're going to be contracting with a local telco for what is essentially a MetroEthernet or MetroLAN connection between our locations. They call it VLS (Virtual LAN Service) and as best I can tell, what it boils down to is a Layer 2 VLAN segmentation of customer traffic.
The telco insists it's a private, secure connection but I've learned well to be paranoid over the years. Should a connection like this be encrypted between sites? What sort of technology is appropriate for encrypting a connection like this?