Switch(config)# hostname SW2
SW2(config)# interface gigabitEthernet 0/0
SW2(config-if)# switchport trunk encapsulation dot1q
SW2(config-if)# switchport trunk allowed vlan 200,400
SW2(config-if)# switchport mode trunk
SW2(config-if)# description Link to VyOS
SW2(config-if) #interface gigabitEthernet 0/1
SW2(config-if) #switchport mode access
SW2(config-if) #switchport access vlan 200
SW2(config-if) #description Link to PC2
SW2(config-if)# interface gigabitEthernet 0/2
SW2(config-if)# switchport mode access
SW2(config-if)# switchport access vlan 400
SW2(config-if)# description Link to PC4

SW1(config)# vlan 200
SW1(config-vlan)# name IPsec_to_A
SW1(config-vlan)# vlan 400
SW1(config-vlan)# name Guest_Internet