After configuring the L2 VPN Server service, configure the L2 VPN service in the client mode on another NSX Edge instance.

Procedure

  1. From your browser, log in with admin privileges to an NSX Manager at https://<nsx-manager-ip-address>.
  2. (Optional) If an IPSec VPN service does not exist yet on either a Tier-0 or Tier-1 gateway that you want to configure as the L2 VPN client, create the service using the following steps.
    1. Navigate to the Networking > VPN > VPN Services tab and select Add Service > IPSec.
    2. Enter a name for the IPSec VPN service.
    3. From the Tier-0/Tier-1 Gateway drop-down menu, select a Tier-0 or Tier-1 gateway to use with the L2 VPN client.
    4. If you want to use values different from the system defaults, set the rest of the properties on the Add IPSec Service pane, as needed.
    5. Click Save and when prompted if you want to continue configuring the IPSec VPN service, select No.
  3. Navigate to the Networking > VPN > VPN Services tab and select Add Service > L2 VPN Client.
  4. Enter a name for the L2 VPN Client service.
  5. From the Tier-0/Tier-1 Gateway drop-down menu, select the same Tier-0 or Tier-1 gateway that you used with the route-based IPSec tunnel you created a moment ago.
  6. Optionally set the values for Description and Tags.
  7. Click Save.
    After the new L2 VPN client service is created successfully, you are asked whether you want to continue with the rest of the L2 VPN client configuration. If you click Yes, you are taken back to the Add L2 VPN Client pane and the Session link is enabled. You can use that link to create an L2 VPN client session or use the Networking > VPN > L2 VPN Sessions tab.

What to do next

Configure an L2 VPN client session for the L2 VPN Client service that you configured. Use the information in Add an L2 VPN Client Session as a guide.