This read-write enumerated value sets a port's L2PT role: access(1) for ingress ports at the edge of the service provider's network, which encapsulate incoming Layer 2 protocol packets and forward them to the tunnel port(s), or tunnel(2) for egress ports at the edge of the provider's network. Admins set access mode on the customer-facing port where tunneled protocols enter, and tunnel mode on the provider-facing port(s) that carry the encapsulated traffic across the backbone. For example, an admin sets this to access(1) on the port connected to a customer switch, and tunnel(2) on the uplink port carrying the encapsulated protocol traffic into the provider network.