Add an L2 VPN Service

You configure an L2 VPN service on a Tier-0 or Tier-1 gateway. To enable the L2 VPN service, you must first create an IPSec VPN service on the Tier-0 or Tier-1 gateway, if it does not exist yet. You then configure an L2 VPN tunnel between an L2 VPN server (destination gateway) and an L2 VPN client (source gateway).

To configure an L2 VPN service, use the information in the topics that follow in this section.

Prerequisites

• Familiarize yourself with IPsec VPN and L2 VPN. See Understanding IPSec VPN and Understanding Layer 2 VPN.
• You must have at least one Tier-0 or Tier-1 gateway configured and available for use. See Add an NSX Tier-0 Gateway or Add an NSX Tier-1 Gateway.