Route over WireGuard only specific interface or IP list

RouterOS General
1

Hi everyone!

I’m trying to set an “extrange” environment, and probably, you can give me the best practice or documentation to follow :stuck_out_tongue:.

Currently I have 1 router Mikrotik and 1 Cloud Router Mikrotik, the router have WAN connection, and other ports in bridge, then Switch have every port in bridge.
I want to connect my VPN (wireguard) only for specific ports or IPs, enable route for this connection, this VPN is full trafic (allow 0.0.0.0/0), I need the specific devices trafic all data over this connection, and obviously, I want to enable connection to this devices over LAN.

what is the best practices and best step to implement some like this?

2

Please draw a network diagram as the explanation is lacking..

3

I created the next diagram, the blue connection is a computer connected internet through VPN, the black use normal ISP connection.

The idea is all PCs can access like a same local network, and PC1/PC2 use ISP to external network, PC3/PC5 use VPN to external network

is it a little clearer like this?

4

Anyone have idea :question:

5

The easiest thing to do would be two create a vlan and put those PCs on the vlan and then ‘forcing’ them to go out wireguard for internet will be easy.

6

I testing a route table, following this topic:

http://forum.mikrotik.com/t/assigning-a-specific-ip-to-use-another-wan/160119/1

The connection is “work” (over terminal) but when I try navigate over Chrome for example, the page receive “timed out” but if I try ping or curl over terminal, working perfect.

7

What or who is providing the VPN server, OR, are you depicting a remote user coming into a VPN on your router???

8

Only the specific internal devices go out internet through specific interface (vpn).

I don’t need any other VPN route now.
I can’t connect the devices directly to VPN, because this use closed OS.

I’m testing the new route with my computer, if I connect using VPN software, the VPN working well, but if I use the new route in router, the connection recived “time out”, but if I use ping or curl command, responde well.

/ip route
add disabled=no distance=10 dst-address=0.0.0.0/0 gateway=\
    "VPN FULL" routing-table=UsingVPNFull suppress-hw-offload=\
   
/routing rule
add action=lookup-only-in-table disabled=no src-address=192.168.10.143/32 \
    table=UsingVPNFull
    
/routing table
add fib name=UsingVPNFull