Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,8 @@ sidebar:
order: 6
---

import { CURL } from "~/components";

Magic WAN customers can configure a custom IKE ID for their IPsec tunnels. Customers that are using Magic WAN and a VeloCloud SD-WAN device together should utilize this option to create a high availability configuration.

:::note
Expand All @@ -13,10 +15,13 @@ This feature is only available via API. There are no configuration options for a

VeloCloud has a high availability mechanism that allows customers to specify one set of IKE parameters (like IKE ID) and multiple remote IPs. Customers create an IKE ID, and then assign the same custom IKE ID to their primary IPsec tunnel and their backup IPsec tunnel. FQDN is the only supported type for custom IKE IDs.

Magic WAN customers can set a custom IKE ID for an IPsec tunnel using the following API call. Customers will need to fill in the appropriate values for <account_id>, <tunnel_id>, and the FQDN wildcard before running the API call.
Magic WAN customers can set a custom IKE ID for an IPsec tunnel using the following API call. Customers will need to fill in the appropriate values for `<account_id>`, `<tunnel_id>`, and the FQDN wildcard before running the API call.

```txt
% cloudflared access curl
https://conduit-api.cfdata.org/accounts/<account_id>/ipsec_tunnels/<tunnel_id>
-XPUT -d '{"custom_remote_identities": {"fqdn_id": "*.<account_id>.custom.ipsec.cloudflare.com"}}'
```
<CURL
url="https://api.cloudflare.com/client/v4/accounts/ACCOUNT_ID/ipsec_tunnels/TUNNEL_ID"
method="PATCH"
json={{
"custom_remote_identities":
{"fqdn_id": "<your_custom_label>.<account_id>.custom.ipsec.cloudflare.com"}
}}
/>