Issue with S2S VPN

RouterOS General
1

Hello!

Created a wg tunnel between sites
HEX S

/interface wireguard peers
add allowed-address=172.24.2.2/32,172.16.0.0/12,192.168.0.0/24 \
    endpoint-address=<ip> endpoint-port=13231 \
    interface=WG1 persistent-keepalive=10s public-key=\
    "key"
/ip address
add address=172.24.2.1 interface=WG1 network=172.24.2.1
/ip route
add disabled=no distance=1 dst-address=192.168.1.0/24 gateway=WG1 \
    pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=10
/ip firewall filter
add action=accept chain=input comment=WG dst-port=13231 in-interface=\
    WAN protocol=udp
add action=accept chain=input in-interface=WG1

HAP ac2

/interface wireguard peers
add allowed-address=172.24.2.1/32,172.16.0.0/12,192.168.0.0/24 \
    endpoint-address=<ip> endpoint-port=13231 \
    interface=WG2 persistent-keepalive=10s public-key=\
    "key"
/ip address
add address=172.24.2.2/24 interface=WG2 network=172.24.2.0
/ip route
add disabled=no distance=1 dst-address=192.168.0.0/24 gateway=WG2 \
    pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=10
/ip firewall filter
add action=accept chain=input comment=WG dst-port=13231 in-interface=\
    WAN protocol=udp
add action=accept chain=input in-interface=WG2

Tunnel works well but it looks like that core can’t transfer data between interfaces

[admin@HEX] > ping 172.24.2.1 count=1
Columns: SEQ, HOST, SIZE, TTL, TIME
SEQ HOST SIZE TTL TIME
0 172.24.2.1 56 64 475us

[admin@HEX] > ping 172.24.2.2 count=1
Columns: SEQ, HOST, STATUS
SEQ HOST STATUS
0 172.24.2.2 timeout

[admin@HEX] > ping 172.24.2.2 count=1 src-address=172.24.2.1
Columns: SEQ, HOST, STATUS
SEQ HOST STATUS
0 172.24.2.2 timeout

[admin@HEX] > ping 172.24.2.2 count=2 src-address=172.24.2.1 interface=WG1
Columns: SEQ, HOST, SIZE, TTL, TIME
SEQ HOST SIZE TTL TIME
0 172.24.2.2 56 64 6ms176us

2

Assuming both have publicly accessible WANIPs?
Is one acting as a server for wireguard handshake, and the other the client?

3

Yep. Look at last ping, that is a connectivity between internal WG interfaces throught tunnel.