MikroTik LTE router with WireGuard VPN for maintenance/support; I can't connect to WebFG.

Hello everyone,

I would like to use a MikroTik LtAP LR8G LTE6 kit as a TTN LoRaWAN gateway. This LoRaWAN gateway will be placed in my garden to collect data there and send it to the internet via LTE.

For support/maintenance (and later MQTT connection), the MikroTik (FW 7.22.2) should establish a WireGuard VPN connection to OpenSense (26.1.6) (home LAN).

From the home LAN, the MikroTik’s web interface (webfig) should be accessed via the WireGuard connection.

The MikroTik is supposed to send/receive its normal data (TTN) and internet traffic via LTE. Only access from the home LAN (and the response to it) should go through the WireGuard connection.

I’ve already managed to get the MikroTik to connect to OpenSense via WireGuard.

But what I can’t figure out is the correct routing or the firewall rules on OpenSense and MikroTik so that I can access the MikroTik’s web management interface from my network.

I’ve tried so many things that my head is spinning, and for security reasons, I’ve rolled everything back for now.

Has anyone set up something similar and can perhaps give me some guidance on what to look out for and what (FW, routing, NAT) I need to configure and where?

Thanks,
Oliver

Hard to say without seeing your configuration, you should post your current situation, anonymized, instructions here:
Forum rules - #5 by gigabyte091

Generally speaking, if you are using the default firewall (as you should) you need to have the Wireguard interface configured as LAN in /interface list member or you need to add a rule for the Wireguard interface in the input chain.