When the required L2 VPN settings are configured, you can enable the L2 VPN service on the edge gateway, using the vCloud Director tenant portal.
If HA is already configured on this edge gateway, ensure that the edge gateway has more than one internal interface configured on it. If only a single interface exists and that has already been used by the HA capability, the L2 VPN configuration on the same internal interface fails.
If this edge gateway is an L2 VPN server, the destination NSX edge, verify that the required L2 VPN server settings and at least one L2 VPN peer site are configured. See the steps described in Configure the Edge Gateway as an L2 VPN Server.
If this edge gateway is an L2 VPN client, the source NSX edge, verify that the L2 VPN client settings are configured. See the steps described in Configure the Edge Gateway as an L2 VPN Client.
- On the L2 VPN tab in the tenant portal, click the Enable toggle.
- Click Save changes.
The L2 VPN service of the edge gateway becomes active.
What to do next
Create NAT or firewall rules on the Internet-facing firewall side to enable the L2 VPN server to connect to the L2 VPN client.