You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/magic-wan/configuration/manually/third-party/juniper.mdx
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,9 +9,9 @@ The configuration settings in this document are based on JUNOS 23.4R2.13.
9
9
10
10
## Prerequisites
11
11
12
-
Confirm that you have the two Cloudflare anycast IPs allocated to your account. You will establish IPsec tunnels to the two anycast IPs irrespective of the location of your Juniper SRX devices (hereon in "endpoint") - traffic will be naturally attracted to the closest Cloudflare colocation facility via BGP Anycast.
12
+
Confirm that you have the two Cloudflare anycast IPs allocated to your account. You will establish IPsec tunnels to the two anycast IPs irrespective of the location of your Juniper SRX devices (hereon in "endpoint") - traffic will be naturally attracted to the closest Cloudflare colocation facility via BGP anycast.
13
13
14
-
Cloudflare recommends customers configure two IPsec tunnels (one to each of the two Anycast IPs allocated to you Cloudflare account) per Internet Service Provider per endpoint. This provides tunnel redundancy diversity.
14
+
Cloudflare recommends customers configure two IPsec tunnels (one to each of the two anycast IPs allocated to you Cloudflare account) per Internet Service Provider per endpoint. This provides tunnel redundancy diversity.
15
15
16
16
Equal Cost Multipath Routing (ECMP) ensures traffic is load-balanced across the tunnels, and you can control traffic steering across the tunnels through route prioritization.
17
17
@@ -33,7 +33,7 @@ This documentation assumes there are two locations connected via Magic WAN:
@@ -564,7 +564,7 @@ Define security policies to permit traffic flows destined for Magic WAN-protecte
564
564
565
565
There are two very simple rules to allow traffic bidirectionally — it is generally recommended to start with a similar policy and then add more stringent rules once general connectivity is established successfully.
566
566
567
-
**From Zone:***cloudflare***To Zone:***trust*
567
+
**From Zone:***Cloudflare***To Zone:***trust*
568
568
569
569
```txt
570
570
set security policies from-zone cloudflare to-zone trust policy cloudflare_to_trust match source-address any
set security policies from-zone trust to-zone cloudflare policy trust_to_cloudflare_permit match source-address any
@@ -707,7 +707,7 @@ ID Algorithm SPI Life:sec/kb Mon lsys Port Gateway
707
707
708
708
It can be very helpful to enable debug logging via traceoptions while setting up the tunnels. The log data can help determine if there are issues and, if so, where they might be occurring.
709
709
710
-
Please note that some errors in the log are benign. The types of errors to look for are those related to authentication or encryption/integrity (i.e. no proposal chosen).
710
+
Please note that some errors in the log are benign. The types of errors to look for are those related to authentication or encryption/integrity (that is, no proposal chosen).
0 commit comments