Scenario: Customer has a Layer 2 network stretched via HCX L2C. In order for the customer to allow their teams to deploy and manage workloads on VMC on a secondary domain, they want to add a Windows Domain Controller as an Identity Source to the VMC SDDC vCenter. This DC is deployed on the same VLAN where the network is stretched but we got an error that the vCenter could not reach the domain controller. Here's how we fixed it. Think Policy Routes for HCX.
https://street2clouds.wordpress.com/2021/11/30/policy-routing-with-hcx-mobility-optimized-networking...
