You can deploy an EC2 instance in your connected Amazon VPC and configure security policies and firewall rules to allow a connection between that instance and a VM in your SDDC.

Prerequisites

To complete this task, you need the following information:

  • The CIDR block for the logical network or networks that the VMs in your SDDC are using. You can find this in the Logical Networks section of the Networking tab in the VMC Console. The Logica Networks section of the Networking tab, showing the logical networks and their CIDR blocks.

  • The Amazon VPC and subnet that you connected to your SDDC during SDDC deployment. You can find this in the Connected Amazon VPC section of the Networking tab in the VMC Console.The Connected Amazon VPC section of the Networking tab, showing the connected AWS VPC and subnet

Procedure

  1. Deploy the EC2 instance in your AWS account.

    Keep in mind the following when creating the EC2 instance:

    • The EC2 instance must be in the VPC that you selected during deployment of your SDDC, or a connection can't be established.

    • The EC2 instance can be deployed in any subnet within the VPC, but you might incur cross-AZ traffic charges if it is a different subnet than the one you selected during SDDC deployment.

    • If possible, select a security group for your EC2 instance that already has an inbound traffic rule configured as described in 2.

  2. Configure the security group for the EC2 instance to allow traffic to the logical network associated with the VM in your SDDC.
    1. Log into your AWS account.
    2. Select EC2.
    3. Select the EC2 instance that you want to be able to connect to.
    4. In the instance description, click the instance's security group and click the Inbound tab.
    5. Click Edit.
    6. Click Add Rule.
    7. In the Type dropdown menu, select the type of traffic that you want to allow.
    8. In the Source text box, enter the CIDR block for the logical network that the VMs in your SDDC are attached to.
    9. Repeat steps 2f through 2h for each logical network that you want to be able to connect to.
    10. Click Save.
  3. Configure compute gateway firewall rules to allow traffic to and from the connected Amazon VPC.
    1. Log in to the VMC Console at https://vmc.vmware.com.
    2. View Details
    3. Network
    4. Add two compute gateway firewall rules to allow traffic between the compute gateway and the Amazon VPC for the appropriate service.

      For the first firewall rule, use All Linked AWS VPC as the source, and the logical network for the VMs in your SDDC as the destination. For the second firewall rule, use the logical network for the VMs in your SDDC as the source, and All Linked AWS VPC as the destination.