We review recent progress on all-optical virtualprivate-network (VPN) schemes in passive optical networks (PONs). PON is a promising candidate in future access areas to provide broadband services with low cost. With all-optical virtual private network (VPN) function, PON can support efficient internetworking among end users with dedicated optical channels, thus enabling guaranteed bandwidth and enhanced security at the physical layer. Here, we discuss and compare existing schemes of all-optical VPNs in time-division-multiplexed (TDM) PONs, and also recently proposed schemes for deployment in wavelength-division-multiplexed (WDM) PONs and two-stage TDM/WDM PONs.