Hi PK,
Yes, you're right:
- L3 VPN means routing, so different subnets
- L2 means switching, so similar subnets on both side
Both are available with VMC:
- L3 VPN with your usual endpoint on premise (from any vendor)
- L2 based on a NSX Edge standalone client available for download from VMC console.
And don't forget that HCX, provided with VMC has also the ability to do L2 Extension by extending your distributed virtual switch (aka dVS)
hope that helped
Emmanuel