Skip to content

[MWAN] Two tunnels per WAN #25054

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Sep 10, 2025
Merged

[MWAN] Two tunnels per WAN #25054

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
d022fb2
added 2 tunnel info
marciocloudflare Sep 10, 2025
25629c8
partial wan 2 tunnels
marciocloudflare Sep 10, 2025
05d5c2d
added 2 tunnels partial
marciocloudflare Sep 10, 2025
0cf18dd
2 tunnel partial and refined text
marciocloudflare Sep 10, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 5 additions & 3 deletions src/content/docs/magic-wan/configuration/connector/reference.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ sidebar:

---

import { GlossaryTooltip } from "~/components"
import { GlossaryTooltip, Render } from "~/components"

Magic WAN Connector software is certified for use on the [Dell Networking Virtual Edge Platform](https://www.dell.com/support/home/en-us/product-support/product/dell-emc-networking-vep1445-vep1485/docs). It can be purchased with software pre-installed through our partner network for plug-and-play connectivity to Cloudflare One.

Expand Down Expand Up @@ -79,7 +79,9 @@ When a failover occurs, traffic is moved to the new active node. It could take u

## WAN settings

This is where you add and configure your WAN connections. Each configured WAN will create one IPsec tunnel.
This is where you add and configure your WAN connections. Each configured WAN will create one IPsec tunnel, unless you have more than one anycast IP configured in your account.

<Render file="mconn/wan-two-tunnels" product="networking-services" />

When you have multiple WANs you can attribute different priorities to each one. Lower values mean a higher priority. This translates in Connector routing traffic through the higher priority WANs or, more precisely, over the IPsec tunnels established over that interface. On the other hand, if you configure multiple WANs of equal priority, traffic will be distributed over those links through [(Equal-Cost Multi-Path) ECMP routing](/magic-wan/reference/traffic-steering/#equal-cost-multi-path-routing).

Expand All @@ -91,7 +93,7 @@ For high-capacity use cases, multiple tunnels can be established with equal prio

### Configure multiple tunnels in the same WAN profile

If you need to configure multiple tunnels for the same WAN profile, [set up multiple WAN connections](/magic-wan/configuration/connector/configure-hardware-connector/#create-a-wan). Each WAN is assigned one IPsec tunnel.
If you do not have more than one anycast IP configured in your account, and you need to configure multiple tunnels for the same WAN profile, [set up multiple WAN connections](/magic-wan/configuration/connector/configure-hardware-connector/#create-a-wan). Each WAN is assigned one IPsec tunnel.

### WAN settings

Expand Down
22 changes: 12 additions & 10 deletions src/content/partials/networking-services/mconn/configure-connectors.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,16 +11,16 @@ params:
---

import {
AnchorHeading,
Aside,
Card,
Code,
GlossaryTooltip,
Markdown,
Render,
Tabs,
TabItem,
DashButton,
AnchorHeading,
Aside,
Card,
Code,
GlossaryTooltip,
Markdown,
Render,
Tabs,
TabItem,
DashButton,
} from "~/components";

{ props.magicWord === "virtual" && (
Expand Down Expand Up @@ -333,6 +333,8 @@ To add a Connector on-ramp:

<Tabs syncKey="dashPlusAPI"> <TabItem label="Dashboard">

<Render file="mconn/wan-two-tunnels" product="networking-services" />

1. In **WAN configuration**, select **Create**. You can create one or more [wide area networks (WANs)](https://www.cloudflare.com/learning/network-layer/what-is-a-wan/). Configuring multiple WANs will create multiple <GlossaryTooltip term="IPsec tunnel">IPsec</GlossaryTooltip> tunnels (one IPsec tunnel per WAN port). This allows the Connector to load balance traffic over WANs of equal priority. It also allows Connector to failover between circuits according to their <GlossaryTooltip term="tunnel health-check" link="/magic-wan/reference/tunnel-health-checks/">health</GlossaryTooltip>. Refer to [WAN settings](/magic-wan/configuration/connector/reference/#wan-settings) for more details.
:::note
This is not the same as a high availability (HA) configuration. HA configurations need two Connectors to work. Refer to [About high availability configurations](#about-high-availability-configurations) for more information.
Expand Down
5 changes: 5 additions & 0 deletions src/content/partials/networking-services/mconn/wan-two-tunnels.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
---
{}
---

When you have more than one anycast IP configured in your account (set up during your Magic WAN onboarding), Connector will automatically create at most two tunnels per WAN port. This improves reliability and performance, and requires no additional configuration on your part.