A way to stretch Layer 2 networks (VNIs or VLANs) over several sites in NSX so they act as one broadcast domain; an L2 VPN server and client are joined by a route-based IPsec tunnel.
Also called Layer 2 VPN.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains L2 VPN in context, with comparison tables and the common traps.
Terms in this definition
- L2
Layer 2 of the OSI model, the data link layer of frames, VLANs and MACs. An NSX segment is one broadcast domain at this layer.
- OVER
Gives a T-SQL window function its window: PARTITION BY, ORDER BY and, if wanted, a ROWS or RANGE frame. Rankings and running totals can then be worked out while every row is kept.
- NSX
Software that handles networking and security across VCF, covering firewalling, load balancing, NAT, VPCs, overlay segments and Tier-0/1 gateways.
- Domain
A way of grouping workspaces by area of the business, in support of a data mesh approach. Items take on their workspace's domain, letting you filter the OneLake catalog by it, and certain tenant settings can be passed to domain admins; domains have no effect on access permissions.
- IPsec
Internet Protocol Security is the set of protocols that negotiates and encrypts the tunnels used by VNet-to-VNet and site-to-site VPNs.
Related terms
- GRE
A tunnel type for linking on-premises with cloud networks from NSX Tier-0 and Tier-0 VRF gateways. L2 VPN in NSX also builds a single tunnel of this kind for each of its sessions.
- HA mode
Choose between active-active, where Edge nodes share the load, and active-standby, which some stateful services like IPsec and L2 VPN demand. For a Tier-1 there is a further Distributed Only option that omits the service router.