Android and IOS VPN with Mikrotik

RouterOS General
1

dear all
hope you will be fine. I want to set up a VPN for my Android and IOS devices (phone). All new Android devices support only ikev2/IPsec.
which VPN is good and efficient.

Thanks

2

Android devices support wireguard, which is recommended
As per the next post… Confirm what type of Public IP you get from your provider.

3

There is also MT “Back To Home” mobile app for iOS and Android which simplifies VPN (Wireguard) configuration process.

4

I have static public IP.
I no need BTH.

5

Great then wireguard it is…
https://help.mikrotik.com/docs/display/ROS/WireGuard

https://www.youtube.com/watch?v=CH10spRyGpU&t=80s

6

You don’t need BTH because you have public static IP (and guessing not behind CGNAT) or you don’t need BTH because you don’t need internet connection routed over home VPN? BTH VPN will not use MT cloud server for VPN connection if VPN port is accessible from WAN.
BTH is easier approach to set it up, if you don’t want to use it then follow some tutorials/guides for Wireguard from this forum or elsewhere how to set it up, there are plenty.

7

But I can’t use BTH for professional services.
However one thing is best in BTH which is QR code.
Easy for cellphone.
But on the other hand I can’t able to scan QR Code in normal wireguard configuration.

Is there any solution for QR code in wireguard without BTH???

8

Yes, QR code is visible in Winbox/WebFig in WG peer configuration

9

I don’t need BTH QR.
I have not found it yet in the peer configuration.
can you please post a screenshot of QR in peer configuration?
wg.PNG

10

I think this is related to ROS version, not sure on which is introduced, I have latest 7.13.5
wg-peer.png

11

and port
Thanks for your answer
1). but here is a problem I want to use IP with my ranges and ports but it shows default IP 192.168.177.2/24: 5180.
2). and just a few websites are opening.
maybe MTU issue?
wgg.PNG

12

A few websites not working when connected with wireguards on Android phone.

Help please

13

Modifying MTU on mikrotik devices, when the mikrotik is CLIENT, is often done connecting to third party servers. Not the reverse. :frowning:

You could try setting the MTU the same on android and Mikrotik to 1500 or other higher and lower variants than the default, and see if one work for all.