Compute workloads connected to a user-created logical network using DHCP are unable to reach an on-premises DNS server.

Problem

If you selected a non-default logical network when creating your compute gateway VPN, and that network uses DHCP, workload VMs might be unable to reach an on-premises DNS server.

Cause

The problem occurs if the compute gateway VPN has not been configured to allow DNS requests over the VPN.

Procedure

  1. Configure the VMware Cloud on AWS side of the VPN tunnel to allow DNS requests over the VPN.
    1. Log in to the VMC Console at https://vmc.vmware.com.
    2. Navigate to the Networking tab of your SDDC.
    3. Under Compute Gateway and click VPN.
    4. Select Actions > Edit.
    5. Under Local Network, select cgw-dns-network.
    6. Click Save.
  2. Configure the on-premises side of the tunnel of connect to local_gateway_ip/32 in addition to the Local Gateway IP address. This allows DNS requests to be routed over the VPN.