In this work, we propose an all optical VPN platform for visible light communication (VLC)-based networks. The main advantage of VLC systems consists in providing both illumination and communication which facilitate the convergence of optical and wireless technologies. We consider an enterprise with multiple distributed sites using VLC technology for communication. In the proposed architecture, the enterprise users can have local and VPN communications. A VPN communication is when the two communicating parts belong to distant enterprise sites and are associated to a VPN tunnel established upon the core network. In this work, we implement the main VPN functionalities, which are : authentication, channel selection, traffic aggregation, quality of service (QoS) and confidentiality, on the optical layer using the Direct sequence Optical Code-Division Multiple-Access (OCDMA) technique and optical codewords.