Magic Transit Training
Slide 8 of 31
👤
Owner: IM / CSE
Phase 2: BYOIP Process (Detailed)
Step-by-Step for BYOIP Prefixes
Obtain LOA from Customer
Must be on company letterhead
Wet signature required
Authorizes Cloudflare (AS13335) to announce prefixes
PDF format only
Validate IRR Entries
Check:
irrexplorer.nlnog.net
Verify route objects match origin ASN
Registries: RADB, RIPE, APNIC, ARIN, AFRINIC
Validate RPKI (Optional but Recommended)
Check:
rpki.cloudflare.com
Valid ROA entries prevent route hijacking
← Previous
Jump to:
1. Magic Transit Onboarding: Step-by-Step T...
2. Learning Objectives
3. What is Magic Transit?
4. Onboarding Timeline Overview
5. Phase 1: Account Setup & Provisioning
6. Phase 1: SFDC Integration & Jira
7. Phase 2: IP Address Management (IPAM)
8. Phase 2: BYOIP Process (Detailed)
9. Phase 2: Adding Prefixes to IPAM
10. Phase 2: Leased IP Process
11. Phase 3: Conduit Configuration
12. Phase 3: Conduit YAML Configuration
13. Phase 3: Applying Conduit Configuration
14. Phase 3: Virtual Subnet & Anycast IPs
15. Phase 4: GRE Tunnel Setup
16. Phase 4: Customer GRE Configuration Exam...
17. Phase 4: Critical - MSS Clamping
18. Phase 5: Static Routes
19. Phase 5: Health Checks
20. Phase 6: Go-Live Preparation
21. Phase 6: Go-Live Process
22. Phase 7: Advanced TCP Protection (ATP)
23. Phase 7: Steady State Verification
24. MTO Jira Workflow
25. Troubleshooting Common Issues
26. Key Takeaways
27. Resources & References
28. Glossary: Key Terms & Definitions
29. Appendix: Conduit YAML Full Example
30. Appendix: Customer Router Templates
31. Appendix: MTCTL Commands Reference
Next →