Compute workloads connected to a user-created logical network using DHCP are unable to reach an on-premises DNS server.

Problem

If you selected a non-default logical network when creating your compute gateway VPN, and that network uses DHCP, workload VMs might be unable to reach an on-premises DNS server.

Cause

The problem occurs if the compute gateway VPN has not been configured to allow DNS requests over the VPN.

Procedure

  1. Configure the VMware Cloud™ on AWS side of the VPN tunnel to allow DNS requests over the VPN.
    1. Log in to the VMC Console at https://vmc.vmware.com.
    2. Navigate to the Networking tab of your SDDC.
    3. Under Compute Gateway and click VPN.
    4. Select Actions > Edit.
    5. Under Local Network, select cgw-dns-network.
    6. Click Save.
  2. Configure the on-premises side of the tunnel of connect to local_gateway_ip/32 in addition to the Local Gateway IP address. This allows DNS requests to be routed over the VPN.