Specify a local (SDDC) IP address, a remote (on-premises) public IP address, and a remote private IP address to create the SDDC end of the Layer 2 VPN tunnel.
VMware Cloud on AWS GovCloud supports a single Layer 2 VPN tunnel between your on-premises installation and your SDDC.