Configure a Layer 2 VPN Tunnel in the SDDC

Specify a local (SDDC) IP address, a remote (on-premises) public IP address, and a remote private IP address to create the SDDC end of the Layer 2 VPN tunnel.

VMware Cloud on AWS GovCloud supports a single Layer 2 VPN tunnel between your on-premises installation and your SDDC.

Procedure

1. Log in to the VMware Cloud on AWS GovCloud at https://www.vmc-us-gov.vmware.com/.
2. Select Networking & Security > VPN > Layer 2.
3. Click ADD VPN TUNNEL.
4. Configure the VPN parameters.

   Option	Description
   Local IP Address	Select the private IP address if you have configured AWS Direct Connect for this SDDC and want the VPN to use it. Select the public IP address if you want the VPN to connect to the SDDC over Internet.
   Remote Public IP	Enter the remote public IP address of your on-premise L2VPN gateway. For an L2VPN, this is always the standalone NSX Edge appliance (see ).
   Remote Private IP	Enter the remote private IP address if the on-premise gateway is configured behind NAT.

5. (Optional) Tag the VPN.

   See Add Tags to an Object in the NSX-T Data Center Administration Guide for more information about tagging NSX-T objects.

6. (Optional) Add a Description.
7. Click SAVE.
   Depending on your SDDC environment, the Layer 2 VPN creation process might take a few minutes. When the Layer 2 VPN tunnel becomes available, the status changes to Up.