ROS7 Wireguard Proton

RouterOS General
1

Hi!
Please, help.
HAP3 device.
ROS7.6 stable
Reset to default configuration, configured Nextdns, pppoe to provider, and getting bgp addresses to access services.
Purpose: traffic of addresses received via bgp should go through wireguard protonvpn.

  1. How to check the tunnel status? (in peers- last handshake 00:00:00 - so it doesn’t work?)
  2. ping does not go even to the wireguard gateway (I assume that in my case it is 10.2.0.1). Ping timeout. For addresses received via bgp the situation is identical.
  3. the connection is successfully established from the PC to the same server (Windows Client)
    Config at the link https://pastebin.com/tMP8Ebi9
  4. Perhaps this is important when exporting there is a line 'add chain=antifilter-in disabled=no rule=‘set gw *0xe; accept;’, however everything is correct in winbox ‘set gw wireguard1; Accept’
    Question: How to raise the tunnel so that it works? As I understand it, from the NAT package counter, the desired traffic is already falling on the Wireguard interface, but it does not go further
2

…

3

The narrower mask match takes precedence, so this route (VPN) will be chosen instead of 0.0.0.0/0

4

Since you are at a higher level of understanding, I will refrain from advice.

5

I dont think so)

If the Rx and Tx counters increase an the Peer section, as well as the Last Handshake time is updated, this can be considered as a sign of a working tunnel.

And what about

add chain=antifilter-in disabled=no rule="set gw *0xe; accept;"

in your config, why not

add chain=antifilter-in disabled=no rule="set gw wireguard1; accept"