The on-premises end of your L2VPN must be an NSX Edge appliance. You must configure this appliance and related on-premises vSphere networking before you can create an L2VPN.

If you have a compatible version of NSX installed in your on-premises data center, you can use your existing NSX Edge appliance as the on-premises (client) side of an L2VPN that connects to your SDDC. If necessary, you can download and deploy a standalone NSX Edge to use as the L2VPN client.

The following table lists compatible SDDC and on-premises versions. To determine the version of NSX running in your SDDC, see Correlating VMware Cloud on AWS with Component Releases in the VMware Cloud on AWS Operations Guide.
Table 1. L2VPN Interoperability
L2VPN Server Version (SDDC version) L2VPN Client Versions (On-Premises Edge)
4.1.0 (SDDC 1.22) 4.0.1.1, 3.2.2
4.0.1 (SDDC 1.19, 1.20) 3.1.1, 3.2.1, 4.0.0.1
3.1.5 (SDDC 1.17, 1.18) 3.1.1

Procedure

  1. (Optional) Download the standalone NSX Edge.
    If you do not have a compatible version of NSX installed in your on-premises data center, you may be able to download and configure a standalone NSX Edge appliance to use as the on-premises endpoint for your L2VPN. After you configure the server side of the L2VPN, follow the instructions on the Remote L2 VPN Client Configuration page to download the NSX Edge for VMware ESXi as an OVF file.
  2. Install and configure the NSX Edge.
    See Add an Autonomous Edge as an L2 VPN Client in the NSX Data Center Administration Guide for information about how to install and configure the Autonomous Edge in your on-premises vCenter Server.