Abstract: Techniques for inserting a network service in an Ethernet access network operated by an access service provider include sending routing data to customer premises equipment. The access network is between a physical layer link with customer premises equipment and a remote packet switched network. The routing data indicates a logical network address for an access gateway for access to the remote packet switched network, and a logical network address for an ancillary gateway for an ancillary service different from access to the remote packet-switched network. A data packet is received from customer premises equipment and it is determined whether a layer 2 destination address indicates the ancillary gateway. If so the data packet is directed to the ancillary gateway instead of the access gateway. Thus, the ancillary service is provided topologically closer to the customer premises equipment.