# Create a L2 VPN - Client session (on-premises site)

## <mark style="color:green;">**Overview**</mark> <a href="#overview" id="overview"></a>

After configuring the networks of the NSX Autonomous Edge, by using On-Premises to Cloud Director Replication Appliance create the client side of the L2 VPN session, stretching one or more networks across the cloud site.

## <mark style="color:green;">**Procedure**</mark> <a href="#procedure" id="procedure"></a>

{% stepper %}
{% step %}
**Step 1:** Log in to the management interface of the VMware Cloud Director Availability On-premises Appliance.

In a Web browser, go to [https://On-Premises-Appliance-IP-address/ui/admin](https://on-premises-appliance-ip-address/ui/admin).

Log in as the **root** user.

<figure><img src="/files/uYPEwC2a2X9DJcbExTKW" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}
**Step 2:** In the left pane, under the **System** section, click **L2 Stretch**.
{% endstep %}

{% step %}
**Step 3:** On the **NSX Autonomous edges** page, click **L2 VPN Sessions** > **NEW**

<figure><img src="/files/XwjKozZ3QpXQSy1N6obf" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}
**Step 4**: If your user session is not currently extended to the cloud site, enter credentials to authenticate to the cloud site.
{% endstep %}

{% step %}
**Step 5:** Select the cloud site virtual data center and the edge gateway on the **VDC and edge Gateway page.**

<figure><img src="/files/xRCeViFVZ6Ezi0hMgIxU" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}
**Step 6:** On the **Settings and networks** page, configure the L2 VPN and click **Next**.

* In the **Name** text box, enter a name for this client L2 VPN session.
* From the **Server session** drop-down menu, select the cloud side L2 VPN server session.
* In the **Local Address** text box, enter the on-premises IP address at the client side of the L2 VPN session.\
  The local IP address must be the same as the uplink port IP address of the NSX Autonomous Edge hosting the client L2 VPN session.
* In the **Remote Address** text box, enter the HI GIO public IP address at the server side of the L2 VPN session.
* Under the Client Network column, to create an L2 stretch across the networks select an on-premises VLAN network.

&#x20;

<figure><img src="/files/zaKKu1kel53bzXHoMTkM" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}
**Step 7:** On the **Ready To Complete** page, review and click **FINISH**.

<figure><img src="/files/hqHfc9bppSEuEFNKxWQ2" alt=""><figcaption></figcaption></figure>

**>>>** The client L2 VPN session on-premises is created and the L2 stretch across the cloud site is complete.

<figure><img src="/files/tJBGVxjZVhNxTW7ygV3b" alt=""><figcaption></figcaption></figure>

&#x20; **\*\*\* Test Connectivity**

Ping to Gateway (on-prem) from HI GIO.

<figure><img src="/files/b4xklpYwl3OcT25Rm5Cd" alt=""><figcaption></figcaption></figure>

Ping to HI GIO’s VM (same VLAN\difference VLAN) from on-prem.

<figure><img src="/files/XpxG757GeaitWaSy5CQT" alt=""><figcaption></figcaption></figure>
{% endstep %}
{% endstepper %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.higiocloud.vn/hi-gio-draas/stretching-layer-2-networks-for-hi-gios-draas/create-a-l2-vpn-client-session-on-premises-site.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.