access to winbox from wireguard

Hi,
I have just configured wireguard on mikrotik based on following guide on http://forum.mikrotik.com/t/mikrotik-wireguard-server-with-road-warrior-clients/148392/1
It is working fine but when I try to connect to winbox after connecting to vpn , it is not possible.
In firewall I have created an admin list with ip that are allowed to connect to mikrotik. Also added firewall filter rule to allow connection to port 8291 for those specific ip addresses.This rule works fine for ikev2 vpn but not for wireguard.

action=accept chain=input dst-port=8291 protocol=tcp src-address-list= "admin ip"

List admin_ip contains ip 192.168.89.3 which is the allowed ip address in wireguard peer (192.168.89.3/32)

I don’t see any in-interface/dst-address in your rule

In wireguard case it is needed? It was not needed for openvpn or ikev2 vpn configs.

I have in-iinterface in similar case,
BTW, maybe your /ip/services setting for winbox is limited with some addreeses?
can you show?

/ip/service/export

You might want to consider adding wireguard to the LAN interface-list. That is by far the fastest solution. But that is something you might need to consider.



 2024-01-29 12:24:21 by RouterOS 7.12.1
# software id = BNXS-DMQL
#
# model = RB941-2nD

Interface wireguard is already added to LAN list

It was my mistake. I was trying to access mikrotik through winbox using the wrong ip address