sars-cov2 is 125nm or 0.125 microns.
Dot1q is not a VPN. There is no encryption in dot1q. It's a way to isolate traffic on a single subnet by tagging the ethernet frames with a VLAN tag. And routing is done at layer 3, not layer 2.
https://en.wikipedia.org/wiki/IEEE_802.1Q