To establish connectivity between two sites you can create private DNS entries for Site Recovery Endpoints. This topic describes how to obtain fully qualified domain names (FQDN) for vSphere Replication and Site Recovery Manager (SRM) on the VMware Cloud on AWS SDDC on US GovCloud region.

To use VMC SDDC as a recovery site, you must pair the VR/SRM installation running on the VMC SDDC with the corresponding VR/SRM installation running on the on-prem SDDC. For more information, see Connect New Site Pair in the VMware Site Recovery Installation and Configuration Guide.

Prerequisites

Verify that the VMware Site Recovery add-on is activated on your recovery SDDC.

Procedure

1. Login to VMware Cloud on AWS GovCloud console.
2. Configure Firewall Rule.
   1. On the VMC GovCloud console, select Networking &Security > Security.
   2. Click Gateway Firewall.
   3. Select Management Gateway.
   4. Click Add Rule to add new inbound rule for inbound/outbound rules for SRM and vSphere Replication.
3. From the VMC GovCoud console, open vCenter UI.
4. Click VMs and Templates and expand Management VMs.
5. Locate the Site Recovery Manager virtual machine and the vSphere Replication virtual machine.
   1. Click the Site Recovery Manager virtual machine and record the private IP address, and DNS name (FQDN).
   2. Click the vSphere Replication virtual machine and record the private IP address, and DNS name (FQDN).
6. Create DNS entries for these components on your local DNS server.
7. Configure the Management Gateway’s DNS forwarder.
   1. From the VMC GovCloud Console, select Networking & Security > DNS.
   2. Click DNS Services and click the vertical ellipses next to Management Gateway, and select Edit DNS Server IPs.
   3. Replace any default DNS server IP address with your local DNS server IP address.
   4. Adjust your local firewall configuration to allow DNS queries from the SDDC to be serviced by your local DNS server.
      For more information on creating DNS entries with your local DNS server IP address, see Configure DNS Services.
8. From the VMC GovCloud Console open vCenter UI.
9. On the vSphere Client page, navigate to Menu > Site Recovery.
   The vSphere Replication and Site Recovery Manager FQDNs are displayed.
10. Click Open Site Recovery.
    The Site Recovery UI opens in a new browser.
11. For a new site pairing, click New Site Pair.
    For more information, see New Site pairing Workflow.
    Note: You must drive all the SRM workflows from the SDDC vCenter/SRM UI. You can authenticate to Workspace One through ADFS to access vCenter and SRM UIs in the SDDC. You are then prompted for credentials to access remote vCenter. Enter the username and password for the on-prem and proceed with SRM workflows. You cannot drive these workflows from their on-prem vCenter or SRM UI.

Results

You can view that the data between VR/SRM installation running on the on-prem SDDC with the corresponding VR/SRM installation running on VMC SDDC are communicating.