You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* copied 3rd party to partials
* moved 3rd party to mwan
* replaced frontmatter
* moved azure
* deleted content
* changed azure
* added vars
* changed from markdown link to html link
* corrected path
* reverted to link anchor link
* removed params
* removed params
* added device compat partial and vars
* removed leading slashes
* corrected path
* corrected vars
* corrected vars
* vars
* corrected var
* Update src/content/partials/networking-services/magic-wan/third-party/azure-vpn-gateway.mdx
Co-authored-by: Pedro Sousa <[email protected]>
* Update src/content/partials/networking-services/magic-wan/third-party/juniper.mdx
Co-authored-by: Pedro Sousa <[email protected]>
* Update src/content/partials/networking-services/magic-wan/third-party/palo-alto.mdx
Co-authored-by: Pedro Sousa <[email protected]>
* Update src/content/partials/networking-services/magic-wan/third-party/sonicwall.mdx
Co-authored-by: Pedro Sousa <[email protected]>
* Update src/content/partials/networking-services/magic-wan/third-party/vyos.mdx
Co-authored-by: Pedro Sousa <[email protected]>
---------
Co-authored-by: Pedro Sousa <[email protected]>
This tutorial provides information on how to connect Alibaba Cloud infrastructure to Magic WAN through IPsec tunnels. For more information regarding Alibaba Cloud technology, refer to [Alibaba's documentation](https://www.alibabacloud.com/help/en/vpn-gateway).
8
-
9
-
## Alibaba Cloud
10
-
11
-
### 1. Create a VPC
12
-
13
-
1. Log in to your Alibaba Cloud account.
14
-
2. Go to **VPC** > **VPN Gateways**, and select **Create VPC** to create a new virtual private cloud.
15
-
3. Give your VPC a descriptive name. For example, `Cloudflare-Magic-WAN`.
16
-
4. Choose the **Region** that aligns with where your servers are located.
17
-
5. In **IPv4 CIDR block**, choose from one of the recommended IP blocks. For example, `192.168.20.0/24`. Take note of the IP block you choose, as you will need it to create a static route in Magic WAN.
18
-
19
-
### 2. Create a VPN gateway
20
-
21
-
1. Still in your Alibaba Cloud account, go to **VPC** > **VPN Gateway**, and select **Create VPN Gateway**.
22
-
2. Give your VPN Gateway a descriptive name. For example, `VPN-Gateway-Magic-WAN`.
23
-
3. In **Region**, choose the server that is best for your geographic region. For example, **US (Silicon Valley)**.
24
-
4. For **Gateway Type**, choose **Standard**.
25
-
5. In **Network Type**, choose **Public**.
26
-
6. For **Tunnels**, select **Single-tunnel**.
27
-
7. In the **VPC** dropdown menu, choose the name of the VPC you created before for Magic WAN. For example, `Cloudflare-Magic-WAN`.
28
-
8. In the **VSwitch** dropdown menu, choose the VSwith you created previously. For example, `VSwitch-CF`.
29
-
9. For options such as **Maximum Bandwidth**, **Traffic**, and **Duration**, select the options that best suit your use case.
30
-
10. In **IPsec-VPN**, select **Enable**.
31
-
11. For **SSL-VPN**, select **Disable**.
32
-
12. When you are finished configuring your VPN gateway, return to the main VPN Gateway window.
33
-
13. Select the VPN gateway you have just created, and then select **Destination-based Routing**.
34
-
14. Select **Add Route Entry**, and enter whatever subnets are needed to reach the required destinations. You can, for example, just add a default route to send all traffic through your Magic WAN tunnel.
35
-
15. When you are finished, return to the main window.
36
-
16. Select **Publish** > **OK** to publish the route.
37
-
38
-
### 3. Create IPsec connections
39
-
40
-
1. Go to **VPC** > **Customer Gateways** > **Create Customer Gateway**.
41
-
2. Create a customer gateway with the Cloudflare anycast IP address given to you by your account team. Typically starts with `162.xx.xx.xx`.
42
-
3. Now, go to **VPC** > **IPsec Connections** > **Create IPsec Connection**.
43
-
4. Create an IPsec connection with the following settings:
44
-
1.**Name**: give it a descriptive name, like `CF-Magic-WAN-IPsec`.
45
-
2.**Associate Resource**: **VPN Gateway**.
46
-
3.**VPN Gateway**: From the dropdown menu, choose the VPN gateway you created previously. In our example, `VPN-Gateway-Magic-WAN`.
47
-
4.**Customer Gateway**: Select the customer gateway you created above for Magic WAN.
48
-
5.**Routing Mode**: **Destination Routing Mode**.
49
-
6.**Effective Immediately**: **Yes**.
50
-
7.**Pre-Shared Key**: This is the pre-shared key (PSK) you will have to use in the Magic WAN IPsec tunnel. If you do not specify one here, the Alibaba system will generate a random PSK for you.
51
-
5. Go to **Advanced Settings**, and expand the **Encryption Configuration** settings.
52
-
6. In **IKE Configurations**, select the following settings to configure the IPsec connection. These settings have to match the supported configuration parameters for [Magic WAN IPsec tunnels](/magic-wan/reference/gre-ipsec-tunnels/#supported-configuration-parameters):
53
-
1.**Version**: _ikev2_
54
-
2.**Negotiation Mode**: _main_
55
-
3.**Encryption Algorithm**: _aes256_
56
-
4.**Authentication Algorithm**: _sha256_
57
-
5.**DH Group**: _group20_
58
-
6.**Localid**: This is the customer endpoint. These are generally IP addresses provided by your ISP. For example, `47.xxx.xxx.xxx`.
59
-
60
-
## Magic WAN
61
-
62
-
### 1. IPsec tunnels
63
-
64
-
1. Follow the [Add tunnels](/magic-wan/configuration/manually/how-to/configure-tunnel-endpoints/#add-tunnels) instructions to create the required IPsec tunnels with the following options:
65
-
1.**Tunnel name**: Give your tunnel a descriptive name, like `Alibaba`.
66
-
2.**Interface address**: Choose from the subnet in your Alibaba Cloud configuration. For example, if your Alibaba default configuration is `169.xx.xx.1/30`, you might want to choose `169.xx.xx.2/30` for your Magic WAN side of the IPsec tunnel.
67
-
3.**Customer endpoint**: This is the IP address you entered for **Locali** in Alibaba's IPsec connection. For example, `47.xxx.xxx.xxx`.
68
-
4.**Cloudflare endpoint**: Enter the same anycast IP address provided by Cloudflare you have entered for Alibaba's Customer Gateway. Typically starts with `162.xx.xx.xx`.
69
-
5.**Pre-shared key**: Select **Use my own pre-shared key**, and enter the PSK key from your Alibaba Cloud IPsec tunnel.
70
-
6.**Replay protection**: **Enabled**.
71
-
2. Select **Add tunnels** when you are done.
72
-
73
-
### 2. Static route
74
-
75
-
1. Follow the [Configure static routes](/magic-wan/configuration/manually/how-to/configure-routes/#create-a-static-route) instructions to create a static route.
76
-
2. In **Prefix**, enter the IP CIDR you used to create your virtual private cloud in the Alibaba Cloud interface. In our example we used `192.168.20.0/24`.
0 commit comments