Skip to content

Commit 2c54c4b

Browse files
[MWAN] 3rd party tuts Cf1 (#25897)
* copied 3rd party to partials * moved 3rd party to mwan * replaced frontmatter * moved azure * deleted content * changed azure * added vars * changed from markdown link to html link * corrected path * reverted to link anchor link * removed params * removed params * added device compat partial and vars * removed leading slashes * corrected path * corrected vars * corrected vars * vars * corrected var * Update src/content/partials/networking-services/magic-wan/third-party/azure-vpn-gateway.mdx Co-authored-by: Pedro Sousa <[email protected]> * Update src/content/partials/networking-services/magic-wan/third-party/juniper.mdx Co-authored-by: Pedro Sousa <[email protected]> * Update src/content/partials/networking-services/magic-wan/third-party/palo-alto.mdx Co-authored-by: Pedro Sousa <[email protected]> * Update src/content/partials/networking-services/magic-wan/third-party/sonicwall.mdx Co-authored-by: Pedro Sousa <[email protected]> * Update src/content/partials/networking-services/magic-wan/third-party/vyos.mdx Co-authored-by: Pedro Sousa <[email protected]> --------- Co-authored-by: Pedro Sousa <[email protected]>
1 parent 5161730 commit 2c54c4b

39 files changed

+6034
-5659
lines changed

src/content/docs/magic-wan/configuration/manually/third-party/alibaba-cloud.mdx

Lines changed: 10 additions & 70 deletions
Original file line numberDiff line numberDiff line change
@@ -4,73 +4,13 @@ pcx_content_type: integration-guide
44

55
---
66

7-
This tutorial provides information on how to connect Alibaba Cloud infrastructure to Magic WAN through IPsec tunnels. For more information regarding Alibaba Cloud technology, refer to [Alibaba's documentation](https://www.alibabacloud.com/help/en/vpn-gateway).
8-
9-
## Alibaba Cloud
10-
11-
### 1. Create a VPC
12-
13-
1. Log in to your Alibaba Cloud account.
14-
2. Go to **VPC** > **VPN Gateways**, and select **Create VPC** to create a new virtual private cloud.
15-
3. Give your VPC a descriptive name. For example, `Cloudflare-Magic-WAN`.
16-
4. Choose the **Region** that aligns with where your servers are located.
17-
5. In **IPv4 CIDR block**, choose from one of the recommended IP blocks. For example, `192.168.20.0/24`. Take note of the IP block you choose, as you will need it to create a static route in Magic WAN.
18-
19-
### 2. Create a VPN gateway
20-
21-
1. Still in your Alibaba Cloud account, go to **VPC** > **VPN Gateway**, and select **Create VPN Gateway**.
22-
2. Give your VPN Gateway a descriptive name. For example, `VPN-Gateway-Magic-WAN`.
23-
3. In **Region**, choose the server that is best for your geographic region. For example, **US (Silicon Valley)**.
24-
4. For **Gateway Type**, choose **Standard**.
25-
5. In **Network Type**, choose **Public**.
26-
6. For **Tunnels**, select **Single-tunnel**.
27-
7. In the **VPC** dropdown menu, choose the name of the VPC you created before for Magic WAN. For example, `Cloudflare-Magic-WAN`.
28-
8. In the **VSwitch** dropdown menu, choose the VSwith you created previously. For example, `VSwitch-CF`.
29-
9. For options such as **Maximum Bandwidth**, **Traffic**, and **Duration**, select the options that best suit your use case.
30-
10. In **IPsec-VPN**, select **Enable**.
31-
11. For **SSL-VPN**, select **Disable**.
32-
12. When you are finished configuring your VPN gateway, return to the main VPN Gateway window.
33-
13. Select the VPN gateway you have just created, and then select **Destination-based Routing**.
34-
14. Select **Add Route Entry**, and enter whatever subnets are needed to reach the required destinations. You can, for example, just add a default route to send all traffic through your Magic WAN tunnel.
35-
15. When you are finished, return to the main window.
36-
16. Select **Publish** > **OK** to publish the route.
37-
38-
### 3. Create IPsec connections
39-
40-
1. Go to **VPC** > **Customer Gateways** > **Create Customer Gateway**.
41-
2. Create a customer gateway with the Cloudflare anycast IP address given to you by your account team. Typically starts with `162.xx.xx.xx`.
42-
3. Now, go to **VPC** > **IPsec Connections** > **Create IPsec Connection**.
43-
4. Create an IPsec connection with the following settings:
44-
1. **Name**: give it a descriptive name, like `CF-Magic-WAN-IPsec`.
45-
2. **Associate Resource**: **VPN Gateway**.
46-
3. **VPN Gateway**: From the dropdown menu, choose the VPN gateway you created previously. In our example, `VPN-Gateway-Magic-WAN`.
47-
4. **Customer Gateway**: Select the customer gateway you created above for Magic WAN.
48-
5. **Routing Mode**: **Destination Routing Mode**.
49-
6. **Effective Immediately**: **Yes**.
50-
7. **Pre-Shared Key**: This is the pre-shared key (PSK) you will have to use in the Magic WAN IPsec tunnel. If you do not specify one here, the Alibaba system will generate a random PSK for you.
51-
5. Go to **Advanced Settings**, and expand the **Encryption Configuration** settings.
52-
6. In **IKE Configurations**, select the following settings to configure the IPsec connection. These settings have to match the supported configuration parameters for [Magic WAN IPsec tunnels](/magic-wan/reference/gre-ipsec-tunnels/#supported-configuration-parameters):
53-
1. **Version**: _ikev2_
54-
2. **Negotiation Mode**: _main_
55-
3. **Encryption Algorithm**: _aes256_
56-
4. **Authentication Algorithm**: _sha256_
57-
5. **DH Group**: _group20_
58-
6. **Localid**: This is the customer endpoint. These are generally IP addresses provided by your ISP. For example, `47.xxx.xxx.xxx`.
59-
60-
## Magic WAN
61-
62-
### 1. IPsec tunnels
63-
64-
1. Follow the [Add tunnels](/magic-wan/configuration/manually/how-to/configure-tunnel-endpoints/#add-tunnels) instructions to create the required IPsec tunnels with the following options:
65-
1. **Tunnel name**: Give your tunnel a descriptive name, like `Alibaba`.
66-
2. **Interface address**: Choose from the subnet in your Alibaba Cloud configuration. For example, if your Alibaba default configuration is `169.xx.xx.1/30`, you might want to choose `169.xx.xx.2/30` for your Magic WAN side of the IPsec tunnel.
67-
3. **Customer endpoint**: This is the IP address you entered for **Locali** in Alibaba's IPsec connection. For example, `47.xxx.xxx.xxx`.
68-
4. **Cloudflare endpoint**: Enter the same anycast IP address provided by Cloudflare you have entered for Alibaba's Customer Gateway. Typically starts with `162.xx.xx.xx`.
69-
5. **Pre-shared key**: Select **Use my own pre-shared key**, and enter the PSK key from your Alibaba Cloud IPsec tunnel.
70-
6. **Replay protection**: **Enabled**.
71-
2. Select **Add tunnels** when you are done.
72-
73-
### 2. Static route
74-
75-
1. Follow the [Configure static routes](/magic-wan/configuration/manually/how-to/configure-routes/#create-a-static-route) instructions to create a static route.
76-
2. In **Prefix**, enter the IP CIDR you used to create your virtual private cloud in the Alibaba Cloud interface. In our example we used `192.168.20.0/24`.
7+
import { Render } from "~/components";
8+
9+
<Render file="magic-wan/third-party/alibaba-cloud"
10+
product="networking-services"
11+
params={{
12+
productName: "Magic WAN",
13+
ipSecTunnelsUrl: "/magic-wan/reference/gre-ipsec-tunnels/#supported-configuration-parameters",
14+
addTunnelsUrl: "/magic-wan/configuration/manually/how-to/configure-tunnel-endpoints/#add-tunnels",
15+
configureStaticRoutesUrl: "/magic-wan/configuration/manually/how-to/configure-routes/#create-a-static-route"
16+
}} />

0 commit comments

Comments
 (0)