Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
34 commits
Select commit Hold shift + click to select a range
8e9bdb4
deleted before you begin partial
marciocloudflare Feb 13, 2025
5238009
added new config connectors partial
marciocloudflare Feb 13, 2025
32d35f1
added set up dash
marciocloudflare Feb 14, 2025
89c02fb
added content
marciocloudflare Feb 14, 2025
7c947e5
deleted connector onramps partial
marciocloudflare Feb 14, 2025
29929ad
deleted activate partial
marciocloudflare Feb 14, 2025
b8a7647
added content
marciocloudflare Feb 14, 2025
d9b5eac
added static ip
marciocloudflare Feb 14, 2025
c9bdf2b
del hd configs partial
marciocloudflare Feb 14, 2025
94cc180
added ha configs
marciocloudflare Feb 14, 2025
e8349d2
deleted ipsec tunnels partial
marciocloudflare Feb 14, 2025
b781740
added ipsec info
marciocloudflare Feb 14, 2025
70d7f6f
added next steps
marciocloudflare Feb 14, 2025
00a7f26
deleted next steps partial
marciocloudflare Feb 14, 2025
a5d313c
adding content
marciocloudflare Feb 14, 2025
1eac2d6
added mermaid component
marciocloudflare Feb 14, 2025
2e2802c
corrected text
marciocloudflare Feb 14, 2025
5b767dc
added vars
marciocloudflare Feb 14, 2025
9690a41
refined text
marciocloudflare Feb 14, 2025
032923b
refined text
marciocloudflare Feb 14, 2025
36dd2d7
refined a href code
marciocloudflare Feb 14, 2025
d8d6eb7
removed mermaid component
marciocloudflare Feb 14, 2025
495195c
deleted mermaid component
marciocloudflare Feb 14, 2025
7fc2935
Update src/content/docs/magic-wan/configuration/connector/configure-h…
marciocloudflare Feb 14, 2025
db517db
Apply suggestions from code review
marciocloudflare Feb 14, 2025
866fc06
Update src/content/docs/magic-wan/configuration/connector/configure-v…
marciocloudflare Feb 14, 2025
b7aeff4
Update src/content/partials/magic-wan/connector/configure-connectors.mdx
marciocloudflare Feb 14, 2025
d244a61
Update src/content/partials/magic-wan/connector/configure-connectors.mdx
marciocloudflare Feb 14, 2025
d9bb44d
Update src/content/partials/magic-wan/connector/configure-connectors.mdx
marciocloudflare Feb 14, 2025
bb6852a
Update src/content/partials/magic-wan/connector/configure-connectors.mdx
marciocloudflare Feb 14, 2025
270b6cf
Update src/content/partials/magic-wan/connector/configure-connectors.mdx
marciocloudflare Feb 14, 2025
6bd6e3c
Update src/content/partials/magic-wan/connector/configure-connectors.mdx
marciocloudflare Feb 14, 2025
db3446a
Update src/content/partials/magic-wan/connector/configure-connectors.mdx
marciocloudflare Feb 14, 2025
fcf5c5d
Update src/content/partials/magic-wan/connector/configure-connectors.mdx
marciocloudflare Feb 14, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -6,162 +6,16 @@ sidebar:
label: Configure hardware Connector
---

import { GlossaryTooltip, Render, Card } from "~/components";

## Prerequisites

You need to purchase [Magic WAN](https://www.cloudflare.com/magic-wan/) before you can purchase and use the Magic WAN Connector. The Magic WAN Connector can function as your primary edge device for your network, or be deployed in-line with existing network gear.

You also need to purchase a Magic WAN Connector before you can start configuring your settings in the Cloudflare dashboard. After buying a Magic WAN Connector, the device will be registered with your Cloudflare account and show up in your Cloudflare dashboard.

Contact your account representative to learn more about purchasing options for the Magic WAN Connector device.

---

## Before you begin

<Render file="connector/before-you-begin" />

---

## DHCP vs static IP connections

Magic WAN Connector uses a DHCP connection at first boot to download your settings and go through the activation process. However, if you need to use a static IP in your Connector, and this is a fresh install:
1. Connect Magic WAN Connector to a DHCP port with access to the Internet.
2. Go through the [setup flow](#set-up-cloudflare-dashboard) below and activate your Connector.
3. Refer to [WAN with a static IP address](#wan-with-a-static-ip-address).

---

## Port speeds

The hardware version of the Magic WAN connector includes two [SFP+ ports](https://en.wikipedia.org/wiki/Small_Form-factor_Pluggable) that support 10G throughput, as well as six RJ45 ports that support 1G throughput.

Refer to [SFP+ port information](/magic-wan/configuration/connector/configure-hardware-connector/sfp-port-information/) for details on this topic.

---

## Set up Cloudflare dashboard

<Render
file="connector/connector-onramps"
params={{
wan: "refers to the physical Magic WAN Connector Ethernet port that you are using for your WAN. The ports are labeled `GE1`, `GE2`, `GE3`, `GE4`, `GE5`, and `GE6`. Choose the number corresponding to the port that you are using in Connector. <br> If you need a throughput higher than 1 Gbps, you can use one of the SFP+ ports. Refer to [SFP+ port information](/magic-wan/configuration/connector/configure-hardware-connector/sfp-port-information/) for more information on the hardware supported.",
lan: "refers to the physical Magic WAN Connector Ethernet port that you are using for your LAN. The ports are labeled `GE1`, `GE2`, `GE3`, `GE4`, `GE5`, and `GE6`. Choose a number corresponding to the port that you are using in Connector. <br> If you need a throughput higher than 1 Gbps, you can use one of the SFP+ ports. Refer to [SFP+ port information](/magic-wan/configuration/connector/configure-hardware-connector/sfp-port-information/) for more information on the hardware supported.",
noConnectorShows:
"You need to have bought a Connector already for it to show up here. Refer to [Prerequisites](#prerequisites) if no Connector shows up in this list.",
}}
/>

## Set up your Magic WAN Connector

### Device installation

There are several deployment options for Magic WAN Connector. Connector can act like a DHCP server for your local network, or integrate with your local setup and have static IP addresses assigned to it.

When Connector acts like the WAN router for your site, deployment will be something like this:

```mermaid
flowchart LR
accTitle: Magic WAN Connector set up as a DHCP server, and connecting to the Internet.
a(Magic WAN Connector)--> b(Internet) --> c(Cloudflare)

subgraph Customer site
d[LAN 1] --> a
e[LAN 2] --> a
end

classDef orange fill:#f48120,color: black
class a,c orange
```

<br />

In the example below, the Connector sits behind the WAN router in your site, and on-ramps only some of the existing LANs to Cloudflare.

<br />

```mermaid
flowchart LR
accTitle: Magic WAN Connector connects to the router in the site, and only some of the LANs connect to Connector.
a(Magic WAN Connector)--> b((Site's router)) --> c(Internet) --> i(Cloudflare)

subgraph Customer site
d[LAN 1] --> a
e[LAN 2] --> a
g(LAN 3) --> b
h(LAN 4) --> b
end

classDef orange fill:#f48120,color: black
class a,i orange
```

Refer to [Magic WAN Connector deployment options](/reference-architecture/diagrams/sase/magic-wan-connector-deployment/) for a high-level explanation of the deployment options that make sense to most environments, as well as a few advanced use cases.

#### Firewall settings required

If there is a firewall deployed upstream of the Magic WAN Connector, configure the firewall to allow the following traffic:

{/* prettier-ignore */}
| Protocol/port | Destination IP/URL | Purpose |
| --- | --- |--- |
| `UDP/53` | DNS destination IP `1.1.1.1` | Needed to allow DNS traffic to Cloudflare DNS servers. Cloudflare uses this port for DNS lookups of control plane API |
| `TCP/443` | - | The Connector will open outbound HTTPS connections over this port for control plane operations. |
| `UDP/4500` | Destination IP `162.159.64.1` | Needed for Connector's initialization and discovery traffic through outbound connections. |
| `UDP/4500` | Destination IP - Cloudflare anycast IPs | Needed for the Cloudflare <GlossaryTooltip term="anycast" link="/magic-wan/configuration/manually/how-to/configure-tunnels/">anycast IPs</GlossaryTooltip> assigned to your account for tunnel outbound connections. This traffic is tunnel traffic. |
| `TCP/7844`, `UDP/7844` | Outbound connections | This is for debugging facilities in the Connector. |
| `UDP/123` | `http://time.cloudflare.com/` | Needed for Magic WAN Connector to periodically contact Cloudflare's Time Services. |

## Activate Connector

<Render
file="connector/activate-connector"
params={{
shippedLanguage: "The Magic WAN Connector is shipped to you deactivated",
}}
/>

---

## WAN with a static IP address

After activating your Connector, you can use it in a network configuration with the WAN interface set to a static IP address — that is, an Internet configuration that is not automatically set by DHCP. To use your Connector on a network configuration with a static IP, follow the steps below.

:::caution
Make sure you complete the setup workflow and activate your Magic WAN Connector before changing the WAN settings to a static IP.
:::

1. Connect Magic WAN Connector to a DHCP port with access to the Internet.
2. [Add a Connector on-ramp](#1-add-a-connector-on-ramp) in the Cloudflare dashboard.
3. Create a [DHCP WAN](#2-create-a-wan).
4. [Activate](#activate-connector) and power on your Connector.
5. Wait 60 seconds.
6. Make changes to the [WAN settings](#2-create-a-wan) in the Cloudflare dashboard to a static IP set up.
7. Wait 60 seconds again.
8. Magic WAN Connector will go offline. This is normal and expected behavior.
9. Adjust your physical connections as required to match the static configuration.
10. Magic WAN Connector comes back online.

---

<Render
file="connector/ha-configs"
params={{
hardSoftConn: "You need to deploy two Connectors in your premises before you can set up a site in high availability.",
finalInstructions:
"Follow the instructions in [Set up your Magic WAN Connector](#set-up-your-magic-wan-connector) and [Activate connector](#activate-connector) to finish setting up your Connectors.",
}}
/>

---

## IP sec tunnels and static routes

<Render file="connector/ipsec-static-tunnels" />

---

## Next steps

<Render file="connector/next-steps" />
import { Render } from "~/components";

<Render file="connector/configure-connectors" params={{
magicWord: "hardware",
productName: "Magic WAN Connector",
productNameType: "Magic WAN Connector",
wan: "refers to the physical Magic WAN Connector Ethernet port that you are using for your WAN. The ports are labeled `GE1`, `GE2`, `GE3`, `GE4`, `GE5`, and `GE6`. Choose the number corresponding to the port that you are using in Connector. <br/> If you need a throughput higher than 1 Gbps, you can use one of the SFP+ ports. Refer to [SFP+ port information](/magic-wan/configuration/connector/configure-hardware-connector/sfp-port-information/) for more information on the hardware supported.",
lan: "refers to the physical Magic WAN Connector Ethernet port that you are using for your LAN. The ports are labeled `GE1`, `GE2`, `GE3`, `GE4`, `GE5`, and `GE6`. Choose a number corresponding to the port that you are using in Connector. <br/> If you need a throughput higher than 1 Gbps, you can use one of the SFP+ ports. Refer to [SFP+ port information](/magic-wan/configuration/connector/configure-hardware-connector/sfp-port-information/) for more information on the hardware supported.",
noConnectorShows: "You need to have bought a Connector already for it to show up here. Refer to [Prerequisites](#prerequisites) if no Connector shows up in this list.",
shippedLanguage: "The Magic WAN Connector is shipped to you deactivated",
hardSoftConn: "You need to deploy two Connectors in your premises before you can set up a site in high availability.",
finalInstructions: "Follow the instructions in [Set up your Magic WAN Connector](#set-up-your-magic-wan-connector) and [Activate Connector](#activate-connector) to finish setting up your Connectors."
}} />
Loading
Loading